Privacy Policy

1. Introduction

Ashal Technologies ("we", "us", "our") operates BrainyMaster, a security awareness training and phishing simulation platform, and BrainyGRC, a governance, risk and compliance platform (together, the "Services"). This Privacy Policy explains what information we collect through our website and Services, how we use it, and the choices you have.

This policy applies to visitors of www.brainymaster.com, and to administrators and end users of the BrainyMaster and BrainyGRC platforms, whether deployed as SaaS or on-premise. For on-premise deployments, your organization acts as the data controller for data processed within your own environment; this policy describes our practices where we act as controller or processor on your behalf.

2. Information we collect

We collect information in the following ways:

• Information you provide directly - such as your name, work email, company, phone number and message when you request a demo, contact us, or register for an account.
• Account and usage information - login activity, role and permissions, course progress, policy acknowledgements, and campaign configuration entered by administrators.
• Automatically collected information - IP address, browser type, device information, and pages visited on our website, typically via cookies and similar technologies.
• Information from your organization's administrator - if your employer deploys BrainyMaster, your administrator may upload your name, email and department to enroll you in training and simulations.

3. How we use information

We use collected information to:

• Provide, operate and maintain the Services, including delivering training content and simulated phishing campaigns configured by your organization.
• Respond to demo requests, support inquiries and other communications.
• Generate risk scores, completion reports and analytics for administrators and compliance reporting.
• Maintain the security, integrity and availability of our Services, including detecting fraud or misuse.
• Improve our website and Services, and communicate product updates where you've agreed to receive them.

4. Phishing & training simulation data

BrainyMaster is designed to be deployed by organizations to train their own employees. Simulated phishing and smishing campaigns are configured and authorized by your employer or organization administrator, not by Ashal Technologies directly. Data generated by these simulations - such as whether a simulated email was opened, clicked, or reported - is made available to your organization's administrators for training and risk-reduction purposes, in line with your employer's internal policies.

If you are an employee whose organization uses BrainyMaster, questions about how your simulation and training data is used should be directed to your employer's IT, security or HR department in the first instance.

5. Data sharing & third parties

We do not sell personal information. We may share information with:

• Service providers who support hosting, email delivery, analytics or customer support, under confidentiality obligations.
• Your own organization's administrators, where you are an end user of a BrainyMaster or BrainyGRC deployment operated by your employer.
• Authorities or third parties where required by law, regulation, legal process, or to protect the rights, property or safety of Ashal Technologies, our customers, or others.
• A successor entity in connection with a merger, acquisition or sale of assets, subject to standard confidentiality protections.

6. Data storage & security

BrainyMaster and BrainyGRC are available as a fully managed SaaS deployment or as an on-premise deployment hosted within your own infrastructure. Where we host data (SaaS), we apply administrative, technical and physical safeguards designed to protect information against unauthorized access, alteration, disclosure or destruction, including role-based access control and encryption in transit. Where you deploy on-premise, data security is governed primarily by your own environment and configuration.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies & tracking

Our website may use cookies and similar technologies to remember preferences, understand site usage, and support essential functionality such as keeping you signed in. You can control cookies through your browser settings; disabling cookies may affect some site functionality.

8. Your rights & choices

Depending on your location and applicable law, you may have rights to access, correct, delete, or restrict the use of your personal information, and to object to certain processing. Where your organization is the administrator of your BrainyMaster or BrainyGRC account, some requests may need to be directed to your organization first. To exercise these rights with respect to information we control directly (such as demo request submissions), contact us using the details below.

9. Data retention

We retain information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Training, campaign and compliance records within a customer deployment are generally retained according to that organization's configuration and retention settings.

10. Children's privacy

Our Services are intended for business use by working professionals and are not directed to children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Material changes may be communicated through the website or directly to administrators.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: info@ashaltech.com
• Phone: +971 56 455 4943
• Web: www.ashaltech.com