PUNCH Privacy Policy
Last updated: October 23, 2020
PUNCH Cyber Corp., a Virginia corporation with its principal offices located at 20319 Portsmouth Blvd., Ashburn, VA 20147-7417 (“PUNCH,” “us,” “we,” or “our”) operates the Sentinel Security Monitoring Project 2.0 application (the "Service"). We are committed to
respecting the privacy rights of our customers and other users of the Service. This privacy policy (the “Policy”) describes the privacy practices for using the Service. We understand the importance of the privacy of personal information. We are committed to making sure we treat carefully any personal information that our customers and other users of the Service may provide us. This Policy applies solely to information collected by the Service and does not apply to any information on other sites even if you access another site through this Site. Unless otherwise defined in this Policy, terms used in this Policy have
the same meanings as in our Terms of Service.
The Policy informs you of our policies regarding the collection, use, and disclosure of personal information when you register for and use our Service. In particular, our policy notifies you about the following issues:
1. What personally identifiable information we collect from you through the Service, how
we use it and with whom we may share it.
2. What choices are available to you regarding the use of your information.
3. The security procedures in place to protect your information.
4. How you can contact us to correct any inaccuracies in the information or for any other
reasons.
Information Collection, Use and Sharing
We are the sole owners of the information collected on or through the Service. By using the Service, you agree to the collection and use of information in accordance with this Policy.
Information Collection and Use
We collect information from you when you register for the Service, we may ask you for information that may include, but is not limited to, your name, address, phone number, email address, and other information. At your option, you may also provide demographic information (such as gender or age) about yourself, but such demographic information is not required.
We will use your information for providing and improving the Service, as well as identifying and communicating with you, responding to your requests or inquiries.
When you access the Service by or through a computing or mobile device, we may collect
certain non-personal information automatically. Such information includes, but is not limited to, the type of computing or mobile device you use, your mobile device unique ID, the IP address of your device, your device’s operating system, the type of Internet browser you use and other statistics. We also gather certain non-personal information, such as internet protocol (IP) addresses from visitors to our websites and store that information in log files. We use this information, which does not specifically identify individual users, to analyze trends, track user movements around our site and to administer the site.
Unless you ask us not to do so through our “opt-in” or “opt-out” procedure (see next section), we may contact you via email in the future to tell you about special offerings, new products or services, or changes to this Policy. We may also use your information to
contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you.
n furtherance of attempting to protect against unauthorized access, intercepting malware or to avoid or deter other cyber intrusions, we may monitor network traffic for purposes of intrusion prevention, intrusion detection, identify traffic emanating from known bad actors, identify known signatures, and the like. At no time will this Service monitor or examine network traffic for any purpose other than the protection of customer information assets and ensuring appropriate and legal use of communications network resources and network performance.
Like many websites and similar services, we use “cookies” in order to make it easier for you to use the Service and for us to gather information about the users of the Service. Cookies are files with a small amount of data and may include an anonymous unique identifier. Cookies are sent to your browser from a web site and transferred to your device. We use cookies to collect information in order to improve our Service to you, including language choices, customer logins, and personalization information. Please see the paragraph on cookies below to understand your options with regard to such information.
We may use and store information about your location depending on the permissions you have set on your device. We use this information to provide features of our Service and to improve and customize our Service. Please see the paragraph below regarding location information to understand your options with regard to that information.
The Service will capture and/or retain small amounts of network traffic related to specific vulnerabilities for identifying intrusion attempts, to confirm security incidents, and/or to aggregate statistics about customer use of the Service.
Information Disclosure and Sharing
We will not use, sell, trade or otherwise share or transfer your personally identifiable information with any third party outside of our organization without first providing you with advance notice, except as described in this Policy. We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services, and to assist us in analyzing how users use our Service. These third parties have access to your information only to perform specific tasks on our behalf and are prohibited from disclosing or using your information for any other purpose.
We will disclose your information where required to do so by law or subpoena, or if we believe such action is necessary to comply with the law and the reasonable requests of law enforcement, or to protect the security or integrity of our Service. We may also release your information when we believe such release is required to enforce our Service policies, or to protect ours, our customers’, or others’ rights, property, or safety.
If we are involved in a merger, acquisition or asset sale, your information may be transferred as a business asset. In such cases, we will provide notice before your information is transferred or becomes subject to a different Privacy Policy.
Your Options Regarding Your Information
Opt-In or Opt-Out: You may opt out of any future contacts from us at any time or change any of your account information by accessing the “My Account” section of the Service, by following the unsubscribe link or instructions provided in any email we send, or by contacting us. Any change will be effective for emails, orders or other action not yet in process. We may also retain any information changed or deleted by you for record- keeping purposes.
Cookies: You have the ability to accept or decline the use of tracking cookies. Most browsers automatically accept cookies, but you can instruct your browser to refuse all cookies or to indicate when a cookie is being used. The Help feature of most browsers provides information on how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you choose to decline cookies, you may not be able to sign in or use other features of our sites and services that depend on cookies, but you will be able to perform basic navigation through the Service.
Location: You can enable or disable location services when you use our Service at any time, through your device location settings.
Information Security
The security of your information is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure. When you submit sensitive information to the Service, your information is protected both online and offline.
If a password is used to protect your account and personal information, it is your responsibility to keep your password confidential. You must also require any employees or other representatives to whom you grant access to the Service to maintain the confidentiality of all passwords.
Wherever we collect sensitive information (such as, but not limited to, credit card data), that information is transmitted to us in a secure way through the use of Secure Socket Layer (SSL) technology and is then encrypted. You can verify this by looking for a closed lock icon in the user interface of your web browser, or looking for "https" at the beginning of the address of the web page.
In addition to using encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees or contractors who need the information to perform a specific job (for example, billing or customer service) can have access to your sensitive information. In addition, the computers and servers on which we store sensitive personal information are kept in a secure environment.
Please understand, however, that no method of transmission over the Internet, or method of electronic storage, is 100% secure. As such, although we strive to protect your personal information, we cannot guarantee its absolute security.
You must promptly notify us if your credit card, user name, or password is lost, stolen, or used without permission. In such an event, we will remove that credit card number, user name, or password from your account and update our records accordingly.
Your information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.
If you are located outside United States and choose to provide information to us, please note that we transfer the information, including your personal information, to the United States and process it there. Your consent to this Policy followed by your submission of such information represents your agreement and consent to that transfer.
In the unlikely event that individual personal information has been acquired, or is reasonably believed to have been acquired, from us by an unauthorized individual and applicable law requires notification, we will notify the affected users of that breach. We will provide such notice promptly, although notification may be delayed, e.g., if we or any law enforcement agency determines that notification would hinder an investigation.
Third Party Sites: Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We have no control over, and assume no responsibility for the content, privacy policies or practices
of any third party sites or services. We strongly encourage you to review the privacy policy of every site you visit, particularly any site that collects personally identifiable information about you.
Children: Our Service does not deal with information relevant to children under the age of 13. As such, we do not knowingly collect personally identifiable information from such children. If you are a parent or guardian and you learn that your children have provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under age 13 without verification of parental consent, we will take steps to remove that information from our servers and other systems.
Access to Your Personal Information
Any time you would like to see the personal information we maintain about you, you can request a copy of such information. Simply send an email with “Personal Information Request” in the Subject line to the email address indicated below. You can also receive this information by sending a letter to the address indicated at the end of this Policy. We will do our best to respond to your request within a reasonable time. At a minimum, we
will contact you within 30 days to tell you approximately how long it will take us to fulfill your request.
If your personal information changes and you would like to update the personal information in our records, please send an email requesting those changes to the email address indicated below. Alternatively, you can send us your requested changes by mail to the address indicated below.
Changes
We reserve the right to update or change this Policy at any time and you should check this Policy periodically. Such changes will be effective immediately after being posted on this page. Your continued use of the Service after we post any modifications to the Policy on this page will constitute your acknowledgment of the modifications and your consent to abide by, and be bound by, the modified Policy. If we make any material changes to this Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice here on this Policy page or our homepage.
Contact Information
If you have any questions or suggestions about this Policy or if you wish to correct any inaccuracies in the information you have submitted to us, please contact us at one of the following contact points:
Email: info@PunchCyber.com
Telephone: 703-594-7266
Postal Address: Punch Cyber Analytics Group 20319 Portsmouth Blvd. Ashburn,VA 2047-7417 USA
Trusted & Recognized
Certifications & Recognitions

Providing federal agencies access to Punch Cyber’s cybersecurity solutions.

078530335

Recognized for our commitment to employee satisfaction and company culture.