# Avispa Privacy Notice URL: https://avispa.ai/privacy/ Legal How Cyber Shell, LLC collects, uses, shares and protects information on the Avispa website and in its website team builder. Effective and last updated November 10, 2026 ## 1. Scope This notice applies to the Avispa website, including Avispa Enterprise and Avispa OrbitSOC pages, website forms, usage analytics and the “Build your agent team” Concierge. Cyber Shell, LLC, 37 N Orange Ave, Suite 400B, Orlando, FL 32801, operates Avispa and controls this information. Customer deployments of Avispa are governed by the customer’s agreement and privacy documentation. Third-party sites have their own notices. ## 2. What we collect ### Website usage When analytics is enabled, we collect pages viewed, scroll depth, buttons and links selected, referral origin, campaign tags, approximate viewport, language and theme, page performance, and limited error details. Our server adds time, country when provided by the host, browser and operating-system family, a daily rotating visitor key, and a shortened network address: IPv4 /24 or IPv6 /48. We do not send the full IP address or full user-agent string to analytics. ### Service and security records Separately from analytics, and whatever your analytics choice, our server records each request it handles so we can run, secure and troubleshoot the site: the time, the address requested without its query string, the response and its timing, the country and continent, browser and operating-system family, device type, and the Cloudflare data center that answered. These records do not include your IP address, the full user-agent string, your city, or request headers. Cloudflare, as our host, also keeps its own short-term logs of these requests, with fuller browser and location details, for up to 7 days. To prevent abuse, the forms and the Concierge run Cloudflare Turnstile, which checks browser signals to tell people from automated traffic, and our server counts requests per hashed IP address and per hashed email address so it can apply rate limits. ### Forms When you book a demo or request an integration, we collect the details shown on the form, such as name, work email, company, job title, company size, deployment preference, goal and requested system. ### Team builder The Concierge collects the work description you enter, the team it produces, technical measures such as timing and token counts, and whether the request succeeds. Do not enter personal, confidential, customer, regulated or sensitive information. The prompt is sent to Amazon Bedrock to generate the team. Prompt text is excluded from the website analytics stream unless CyberShell deliberately enables masked prompt logging after completing its privacy and vendor controls. ### Information you provide directly We also collect communications and the information needed to verify and fulfill a privacy request. We do not seek sensitive personal information through this website. ## 3. How we use information We use information to operate and secure the site; build the team you request; respond to inquiries; understand site performance and engagement; diagnose failures; prevent abuse; improve Avispa; comply with law; and establish, exercise or defend legal claims. We may send follow-up about a request you made. Marketing email identifies the sender and includes a way to unsubscribe. ## 4. Service providers and disclosures Cloudflare hosts the Avispa website. Website analytics travels from the browser through our API to Cribl for processing and analysis. Team-builder text travels through our API to Amazon Web Services, including Amazon Bedrock. If invocation logging is enabled, Amazon S3 and Amazon SQS can relay those logs to Cribl. Cloudflare also runs the Turnstile security check and sends the emails our forms generate, which Microsoft 365 delivers to us. Hosting, content-delivery, security, email and search providers may process the limited information needed to provide their services. We may disclose information when required by law, to protect rights and safety, during a corporate transaction, or with your direction. We require service providers to use information only to provide contracted services and to protect it. **CyberShell does not sell personal information or share it for cross-context behavioral advertising, and does not use it for targeted advertising.** ## 5. Retention - Website events are kept for up to **13 months**. Service and security records are kept for up to **12 months**, and request traces for up to **48 hours**. Rate-limit counts are deleted within a day of expiring, and expire after an hour or a day. - Builder prompt text, if masked prompt logging or model invocation logging is enabled, is kept for up to **90 days**. - Sales and integration inquiries are generally kept for up to 24 months after the last interaction. - Privacy-request records are generally kept for 24 months after closure. We may retain information longer when law, a legal hold, security investigation or contract requires it. Aggregated or deidentified statistics may be retained longer when they cannot reasonably identify a person. ## 6. Analytics and privacy choices Avispa does not use advertising cookies. Analytics uses an in-memory session identifier and does not store event data in your browser. If you make a choice below, we store that preference in local storage so the site can remember it. We honor browser Global Privacy Control and Do Not Track signals by turning off Avispa website analytics. These signals override the choice below. Essential security, form and builder processing still occurs when you ask us to provide those services. Analytics is allowed on this browser. You can also unsubscribe through a marketing email or contact us to update your communications preference. ## 7. Your US privacy rights Depending on where you live and subject to legal exceptions, you may have the right to know or access personal information; correct inaccurate information; delete information; obtain a portable copy; opt out of sale, sharing, targeted advertising or certain profiling; and limit certain uses of sensitive personal information. You may use an authorized agent. Our non-discrimination policy means we will not discriminate against you for exercising a privacy right. Email [info@cybersh.com](mailto:info@cybersh.com) or write to the postal address below. Describe the right you want to exercise and the Avispa interaction involved. We will verify the request in proportion to its sensitivity, respond within the period required by applicable law, and explain any denial. Where state law provides an appeal, reply with “Privacy appeal” and the reason you disagree. You may also contact your state attorney general. ## 8. Security and incident response We use administrative, technical and physical safeguards designed for the nature of the information, including access controls, data minimization and monitored service connections. No system is completely secure. If a breach affects information covered by notification law, we will investigate and provide required notices to affected people and authorities. ## 9. Children Avispa is a business service and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13. Contact us if you believe a child submitted information so we can review and delete it as appropriate. ## 10. Changes to this notice We review this notice at least annually and when our data practices materially change. We will post the revised notice here, update the date above and provide additional notice when law requires it. ## 11. Contact us **Cyber Shell, LLC** Attn: Privacy 37 N Orange Ave, Suite 400B Orlando, FL 32801 [info@cybersh.com](mailto:info@cybersh.com)