Terms, Privacy & Acceptable Use

Welcome to CyberExchange, operated by IT-Harvest, LLC (“IT-Harvest”, “we”, “us”, or “our”). By accessing or using CyberExchange at cyberexchange.ai (the “Service”), you agree to be bound by these Terms of Service, the Privacy Policy, and the Acceptable Use Policy below. If you do not agree, you may not use the Service.

CyberExchange is a cybersecurity product marketplace that enables users to discover, compare, and manage cybersecurity products and vendors. The Service includes product search, vendor intelligence, security stack management, framework mapping, and related tools.

Certain features require account registration. You agree to provide accurate information and maintain the security of your credentials. You are responsible for all activity under your account.

We reserve the right to suspend or terminate accounts that violate these terms or engage in fraudulent activity.

All content, trademarks, and intellectual property on CyberExchange are owned by IT-Harvest or its licensors. Product information, logos, and descriptions belong to their respective vendors and are displayed for informational purposes.

You may not reproduce, distribute, or create derivative works from our content without express written permission.

CyberExchange displays information about third-party products and vendors. We do not endorse, warrant, or guarantee any third-party product or service. Product information is provided as-is and may not reflect the most current offerings.

Links to external websites are provided for convenience. We are not responsible for the content or practices of linked sites.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IT-HARVEST SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

You agree to indemnify and hold harmless IT-Harvest, its officers, directors, employees, and agents from any claims, losses, or damages arising from your use of the Service or violation of these terms.

We reserve the right to modify these Terms at any time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the modified terms.

These Terms shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law provisions.

CyberExchange is operated by IT-Harvest, LLC. This Privacy Policy explains what information we collect when you use the Service, how we use it, and the choices you have.

• Account information — your email address and, if you sign in with Google, basic profile details (name, profile image) provided by that sign-in.
• Content you create — security stacks, notes, tags, comparisons, and related data you save in the Service.
• Billing information — handled by our payment processor (Stripe). We do not store full card numbers; we retain subscription status and the limited billing metadata Stripe returns.
• Communications — information you submit through contact, demo-request, or support forms.
• Usage & technical data — pages visited, features used, and standard request metadata (IP address, user-agent, timestamps) used to operate and secure the Service.

• Provide, maintain, and improve the Service;
• Authenticate you and manage your account and subscription;
• Process payments and send transactional email (e.g., sign-in links, receipts, invitations);
• Detect, prevent, and respond to abuse, fraud, and security incidents;
• Respond to your inquiries and provide support.

We do not sell your personal information, and we do not use it for third-party advertising.

We share data only with providers that help us operate the Service, under contract and only as needed:

• Supabase — database and authentication;
• Stripe — payment processing;
• Loops — transactional email delivery;
• Google Cloud — hosting, Google sign-in (OAuth), and reCAPTCHA Enterprise (bot protection).

We use only essential cookies — those required to keep you signed in and to operate reCAPTCHA bot protection. We do not use advertising or third-party tracking cookies.

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below.

Depending on your location (including under GDPR and CCPA/CPRA), you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond within the time required by applicable law.

We protect your data with industry-standard measures, including encryption in transit (TLS), row-level access controls in our database, scoped credentials, and continuous monitoring. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of incidents where required.

We operate in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored in, and processed in the U.S. and other countries where our service providers operate.

The Service is intended for business and professional use and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated date.

CyberExchange’s data, content, and infrastructure are protected resources. When using the Service, you agree not to:

• Crawl, scrape, spider, harvest, bulk-download, or use any automated, headless, or scripted means to access, extract, or index content without our express written permission;
• Circumvent, disable, or interfere with rate limits, bot detection, authentication, access tiers, paywalls, or any other technical protection;
• Bulk-export, copy, redistribute, publish, or resell CyberExchange data or content, in whole or in part;
• Use the Service or its data to build, train, or populate a competing product, dataset, or service;
• Reverse engineer, decompile, or attempt to derive source code, or access the Service through unauthorized interfaces or APIs;
• Probe, scan, or test the vulnerability of the Service, or attempt to gain unauthorized access to any account, system, or data;
• Overload, flood, or disrupt the Service or its infrastructure (including denial-of-service activity);
• Upload or transmit malicious code, or impersonate any person or entity;
• Use the Service for any unlawful purpose or in violation of applicable laws.

We continuously monitor for abuse. We may, at our discretion and without notice, rate-limit, throttle, suspend, or terminate access; revoke API credentials; and pursue any available legal and equitable remedies for violations of this policy. Authorized, good-faith security research may be permitted with prior written coordination — contact us before testing.