Terms of Use, Privacy Policy, and Data Processing Addendum

    Legal documents governing your use of iboss services and our commitment to data protection

    Privacy Policy

    Last Updated: March, 2026

    INTRODUCTION

    Welcome to the Privacy Policy of iboss, Inc. and its subsidiaries (collectively "iboss," "our," "we," or "us"). iboss provides a software platform, Licensed Software, Services, hardware, mobile applications, and other related services and products ("Platform") to defend our customers' networks (including without limitation: enterprise, commercial, and home) against malware, advanced threats, and data loss. This Privacy Policy describes how we collect, use, disclose, store, and otherwise process your Personal Information when you use our website located at www.iboss.com or other successor URLs or other related websites ("Website") and Platforms. It also states how you can control the collection, correction, and/or deletion of your information. We will not use or disclose your information with anyone except as described in this Privacy Policy. All terms referenced in this Privacy Policy, unless otherwise noted herein, shall have the meanings set forth in the iboss Terms of Service.

    Please note that our Website and other Platforms may contain links to third-party websites/digital platforms that are provided for your convenience. We are only responsible for the privacy practices and security of our own products, services, and digital platforms. We recommend that you check the privacy and security policies and procedures of every other website/digital platform that you visit.

    Personal Information refers to any information relating to an identified or identifiable natural person, such as an identification number, or physical, physiological, mental, economic, cultural, or social identifiers. Personal Information may include the following: name, address, date of birth, gender, and contact data (i.e., e-mail address, telephone number, and employer name). By providing your Personal Information to iboss in the ways described in this Privacy Policy, you agree that you are authorized to provide that information and are accepting this Privacy Policy and any supplementary privacy statement that may be relevant to you. If you do not agree to our practices, please do not register, subscribe, create an account, or otherwise interact with our Website or Platforms.

    If you are a California resident or you are located in Europe (including the UK and Switzerland), please see our Regional Privacy Policy Supplement.

    WHAT INFORMATION DO WE COLLECT AND FROM WHAT SOURCES?

    Personal Information that You Disclose to Us

    We collect Personal Information that you voluntarily provide to us when expressing an interest in obtaining information about us or our products and services, when using our Websites or Platforms, and when otherwise interacting with us.

    The Personal Information that we collect depends on the context of your interactions with us. You may be providing Personal Information when (i) submitting questions and seeking information from us; (ii) subscribing to iboss' marketing material; (iii) requesting product and/or services support; (iv) providing services to iboss; (v) applying for a job at iboss; or (vi) otherwise communicating with us via phone calls, chats, emails, web forms, social media, and other methods of communication.

    When working with us or using our Websites or Platforms, you may be prompted to create an account that may hold Personal Information such as your name, mailing address, email address, or credit card information. Additionally, the nature of the services that we provide to our customers entails iboss processing Personal Information.

    In connection with operating the Platform, we may collect Personal Information (e.g., name, email address, and other contact information) from individuals associated with a customer, for example, a customer's contact or administrator, or on their own behalf, as iboss customers. We store this administrator information in our systems and use it for account maintenance and recordkeeping purposes.

    The Platform permits our customers and their administrators to enable rules and functionality to monitor and secure their networks. In this way, the customer may elect to use the Platform to track its or the customer's employees' and end users' Personal Information associated with their use of the customer's networks, systems, and mobile devices, including but not limited to email addresses, IP addresses, login credentials, websites search terms, websites visited, and files downloaded ("Platform Personal Information"), and can correlate Platform Personal Information to the name or identity of the employee or end user.

    By default, our Platform processes Platform Personal Information. However, we do not ordinarily access or review Platform Personal Information because it is protected within segregated, containerized reporting databases that isolate this information. Additionally, critical information, such as passwords, is subject to security measures designed to prevent our direct access to the underlying information. By default, Platform Personal Information is only accessible to the customers or its administrator(s) and other authorized users (as applicable) who were designated by the customer or administrator(s). In some cases, however, a customer may provide us administrative access to the Platform Personal Information, typically to enable us to provide customer support.

    Customers may use the Platform to control, secure, and enforce policies on their and their users' mobile devices (phones, tablets, PCs, etc.). Our mobile-device applications work in conjunction with our Platform to enforce these policies, and as such, we may be provided information related to bookmarks shortcuts.

    Recruiting Information

    If you choose to apply to work with or for us through our Website or by otherwise contacting us regarding opportunities to become an agent or contractor for us, we may collect the following: contact information, such as your first and last name, email and mailing addresses, phone number, professional title and company name; resume information, such as qualifications, skills, employment or education history, or other resume information; reference information, such as name and contact details of your references; or social media information, such as if you provide us a link to or other access to a social media account, we may collect or access any information you permit to be shared through or from your social media account and other information depending on the social media platform.

    You may have the opportunity to refer friends or other contacts to us or otherwise provide us Personal Information of others. You may only submit a referral or otherwise provide us Personal Information of others if you have permission to provide to us the individual's Personal Information and by providing such information you represent and warrant that you have the authority to do so and to permit us and our service providers to use such information in accordance with this Privacy Policy.

    Information That We Collect Automatically

    Website Technical Information

    iboss may collect Technical Information about you when you visit our Website which your web browser automatically sends whenever you visit certain websites on the Internet. "Technical Information" may include your Internet Protocol ("IP") address, browser type, browser language, and the date and time of your request. Gathering Technical Information helps us ensure our Website and Platforms work correctly and support our customer analytics efforts.

    Email Communication

    We use pixel tags and cookies in our marketing emails so that we can track your interaction with those messages, such as when you open the email or click a URL link that's embedded within them. When recipients click on one of those URLs, they pass through a separate web server before arriving at the destination page on a company website. We use tools like pixel tags and cookies so that we can determine interest in particular topics and measure and improve the effectiveness of our communications.

    Mobile-Device Applications & Communications

    When you download or use our mobile-device applications, we may receive information about you and your mobile device, such as username, group names, and other device-specific information (e.g., UUID), which we transmit to iboss' secure cloud gateway to authenticate your device and thereby enable our customers to control, secure, and enforce internet content filtering and other cybersecurity protocols on the device ("Policies"). The mobile-device applications also obtain permissions from a mobile-device user to access device settings and data, including but not limited to Bluetooth, WiFi, geolocation data, firewalls, and browser histories and bookmarks (collectively, "Settings"), to enable the application of Policies to those Settings. Our mobile-device applications may access geolocation data for the purpose of enabling our customers' administrators to track end users' devices, for example, in situations where the end user loses the device and seeks assistance from the administrator to locate it. Geolocation features are configured and applied solely by our customers and can be disabled by the mobile device user. We do not determine whether to collect geolocation information. Please contact the entity that collected your information for any questions regarding geolocation data.

    The specific types of information the mobile-device applications collect may differ based on the cybersecurity package that you or your organization has purchased from iboss, the operating system (e.g., iOS or Android) of the device on which an application is installed, and the deployment and Policies chosen. Our mobile-device applications access the foregoing information automatically when installed on mobile devices, and solely to provide user functionality concerning our cybersecurity services. In addition, the gateway to which our mobile-device applications communicate may track and monitor content and URL destinations depending on the Policies applied to your device and your internet browsing activity.

    Cookies and Similar Technologies

    iboss uses cookies to operate and improve our Website as well as to simplify the interaction with you. When you visit our Websites, our servers send a cookie to your computer or mobile device to help personalize your experience and advertisements. Cookies help us better understand user behavior and facilitate effectiveness of advertisements. Please see Your Choices below for more information.

    HOW DO WE USE PERSONAL INFORMATION?

    We use Personal Information as set forth below.

    To operate, administer, protect, and provide our business, Website, and Platforms. For example, your information is hosted and processed by our Platform in order for you and our customers to utilize our services, create accounts, manage payments, and obtain customer support;

    To respond to your inquiries, comments, feedback or questions. For example, we use your information to respond to your requests for information about our Site and Platform and, if you are a current customer or employee of a customer and submit a request for technical support, to identify you as associated with a current customer and provide more accurate and personalized technical support;

    To manage our relationship with you, which includes sending administrative information to you relating to our Website and Platform and changes to our terms, conditions, and policies, and asking you to leave a review or take a survey;

    To analyze how you interact with our Website and Platform and provide, maintain, and improve the content and functionality of the Website and Platform and our customer relationships and experiences, develop our business, and inform our marketing strategy (please see the "Cookies and Similar Technologies" section to learn how we use cookies). For example, we may use your information to refine and improve the Platform and Website such as to add new features and improve the user experience, we may collect your information through forms that you submit, and may collect information automatically as set forth above to inform us about their performance and areas of improvement. We may also use your information to communicate with you about your use of the Website or Platform;

    To prevent fraud, criminal activity, or misuses of our Website or Platform. For example, we may process information you provide to identify any fraudulent, harmful, unauthorized, unethical, or illegal activity and we may use your information as necessary to defend ourselves in litigation or enforce our rights or agreements with others;

    To ensure the security of our IT systems, architecture, and networks (including troubleshooting, testing, system maintenance, support, and hosting of data);

    To comply with legal obligations and legal process as well as protect our, our affiliates, your and third parties' rights, privacy, safety, or property, and to recover debts due to us. For example, we comply with lawfully issued orders to process data where we have determined there is a legal requirement for us to do so. We may provide information to government authorities or agencies as required by applicable law and in relation to their investigations; and

    To conduct recruiting and hiring activities for opportunities with iboss. If you apply to work with or for iboss, we will review the information you submit to determine if your qualifications and experience match any available opportunities at iboss, to conduct background checks and verify the information you provide, communicate with you regarding any opportunities, improve our recruiting processes, process your onboarding if hired, and comply with applicable labor and employment laws.

    If you are located in the European Union ("EU"), UK, Switzerland, or other relevant countries, please see our Regional Privacy Policy Supplement.

    Marketing. We may contact you to provide information we believe will be of interest to you. For instance, if you elect to provide your email address, we may use that information to send you promotional information about our products and services. If we do, where required by law (for example if you are in Europe), we will only send you such emails if you consent to us doing so at the time you provide us with your Personal Information. You may opt out of receiving emails by following the instructions set forth in the Your Choices section below. If you unsubscribe from our marketing lists, you will no longer receive marketing communications, but we will continue to contact you regarding our Website and Platform and to respond to your requests.

    Aggregate/Deidentified Data. We may aggregate and/or deidentify any information collected through the Website or Platform so that the information can no longer be linked to you or your device. We may use the aggregated and/or deidentified information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, promotional partners, and sponsors.

    WHAT PERSONAL INFORMATION DO WE DISCLOSE TO THIRD PARTIES?

    Vendors and Service Providers

    We may disclose personal information with third-party vendors and service providers that work with us. For example, if you purchase access to our Platforms via an authorized iboss distribution partner or reseller, we may provide your Personal Information to that partner or reseller to facilitate your use of those products and services.

    We require that our third-party service providers agree to keep confidential all Personal Information that we disclose to them and to use the information only to perform their obligations in the agreements we have in place with them. These third-party service providers are expected to maintain privacy and security protections that are consistent with iboss' privacy and information security policies.

    Disclosure of Personal Information for Legal and Safety Reasons

    iboss may be required to disclose Personal Information to the authorities, law enforcement agencies, government agencies, or legal entities to comply with valid legal process including subpoenas, court orders, or search warrants, and as otherwise authorized by law. Additionally, we may disclose Personal Information (i) to the extent permitted by applicable law in special cases in which we believe it is reasonably necessary to investigate, identify, or take preventive measures, or bring legal action against someone who may commit or cause harm, fraud, abuse, or illegal conduct, such as a threat of harm to you or anyone else, interference with our rights or property, or interference with U.S. homeland or national security or public safety anywhere in the world; or (ii) in the event of an emergency that threatens an individual's life, health, or security.

    Affiliates

    iboss may disclose customer information within our family of companies for a variety of purposes, for example to provide you with the latest information about our Platform and other services, to conduct recruiting and hiring activities, and to provide you access to the Website and Platform.

    Consent

    We may disclose your information when we have your consent, for example, to prospective customers with whom you have agreed to speak regarding the Platform.

    Business Transfers

    As we continue to develop our business, we may buy, merge, or partner with other companies. In such transactions (including in contemplation of such transactions), user information may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third-party, customer information (including information processed in accordance with this Privacy Policy) may be one of the transferred business assets. If such transfer is subject to additional mandatory restrictions under applicable laws, or contractual obligations, we will comply with such restrictions.

    Aggregate/Deidentified Information

    From time to time, we may disclose aggregate/deidentified information about use of the Platform or Website, such as by publishing a report on usage trends. The disclosure of such data is unrestricted.

    DO WE TRANSFER PERSONAL INFORMATION INTERNATIONALLY?

    To facilitate our global operations, iboss may transfer Personal Information from your jurisdiction to other iboss locations across the world. iboss primarily stores Personal Information about prospective and actual customers in the United States, but also stores that information in the United Kingdom. The United States may have data protections laws that are less stringent than or otherwise different from the laws in effect in your location. Transfers of Personal Information subject to this Privacy Policy to iboss in the United States are necessary to perform the agreement we have entered into, or are about to enter into, with you.

    Personal Information that end users transmit through our Platform while accessing the Internet always resides within secured and containerized reporting databases. The Platform processes Personal Information anywhere in which a customer may be located (e.g., the US, EU, or other non-EU countries) via global data centers that are most proximate to an end user's physical location when the end user is connected to a network and engaging in activity on the Internet. However, the customer can designate and control where the processed data are stored based on the customer's geo-location requirements. Thus, for example, an EU-based customer may designate that all data from the customer's end users – irrespective of where the end users are located globally – are processed and stored only in EU-based data centers.

    If the Personal Information is transferred to countries without 'adequate' protection as determined by the European Commission, we will use additional safeguards to ensure any such transfers of Personal Information comply with applicable requirements based on the particular Personal Information, such as the EU Standard Contractual Clauses. You understand that in providing Personal Information to us via our Website, Platform, or through other interactions with us, you consent to the transfer of your Personal Information to the United States and other jurisdictions in which we operate.

    In addition to EU Standard Contractual Clauses, the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield programs ("Privacy Shield") previously provided a framework for companies to transfer Personal Information between the EU and United States. iboss was previously Privacy Shield certified, but due to the European Court of Justice's July 16, 2020 decision invalidating Privacy Shield, iboss is no longer applying Privacy Shield to relevant transfers of Personal Information and is instead relying on EU Standard Contractual Clauses. To the extent Personal Information was transferred to iboss under our prior Privacy Shield Certification, and if we have retained such information, we will provide protection for such information according to the EU Standard Contractual Clauses.

    WHAT IS OUR PERSONAL INFORMATION RETENTION POLICY?

    iboss retains your Personal Information as long as reasonably necessary for the business purposes described in this Privacy Policy, and/or as long as is reasonably necessary to provide our Website and Platforms, or as reasonably necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

    If you have elected to receive marketing communications from us, we retain information about your marketing preferences until you opt out of receiving these communications and in accordance with our policies.

    To determine the appropriate retention period for your Personal Information, we will consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we use your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

    HOW DO WE HANDLE INFORMATION THAT WE RECEIVE FROM CHILDREN?

    Our Website and Platforms are not directed to individuals under 16 years of age. We do not knowingly collect information about children under the age of 16, or minors otherwise defined in local law or regulation, without verifiable parental consent. If we learn that someone under 16 has provided Personal Information through our Website, we will use reasonable efforts to remove that information from our databases.

    YOUR CHOICES

    In this section, we describe the rights and choices available to you in how we process your Personal Information.

    Choosing not to provide your Personal Information. You may choose not to provide Personal Information. If you choose not to provide Personal Information (or ask us to delete it), we may not be able to provide you with our Website or Platform or certain of their features. We will tell you what information you must provide to use certain features by designating it as required at the time of collection or through other appropriate means.

    Opt out of marketing communications. You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions in the communication, or by contacting us as set forth below. If you opt out of marketing communications, you may continue to receive Platform-related and other non-marketing emails.

    Cookies & browser web storage and targeted online advertising. We, or service providers or other third parties we contract with, may use cookies and similar technologies to track your browsing activity over time and across the Website and third-party websites or applications. If business partners collect information about your activities on or through the Website, they may be members of organizations or programs that provide choices to individuals regarding the use of their browsing behavior or mobile application usage for purposes of targeted advertising. For more details, see our Cookie Policy.

    Do Not Track Signals. There are different ways to prevent tracking of online activities. Some web browsers may allow you to enable a do-not-track feature that alerts the websites you visit that you do not want your online activities to be tracked. Our Site currently does not respond to "Do Not Track" ("DNT") signals and operates as described in this Privacy Policy whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will describe how we do so in this Privacy Policy.

    REGIONAL PRIVACY TERMS

    If you are a California resident or you are located in Europe (including the UK and Switzerland), please see our Regional Privacy Policy Supplement.

    HOW DOES IBOSS SECURE YOUR PERSONAL INFORMATION?

    iboss uses technical and physical safeguards to protect the security of your Personal Information from unauthorized disclosure. We also make commercially reasonable attempts to ensure that only necessary people and third parties have access to Personal Information. Nevertheless, such security measures cannot prevent all loss, misuse, or alteration of Personal Information, and we are not responsible for any damages or liabilities relating to any such incidents to the fullest extent permitted by law.

    DO WE UPDATE THIS PRIVACY POLICY?

    iboss may review and update this Privacy Policy periodically without any prior notice. We will indicate in the Privacy Policy when it was most recently updated. In the case of material changes to the Privacy Policy, we may notify you of such changes.

    HOW MAY I CONTACT IBOSS?

    To contact iboss about any of the foregoing matters, please use the following addresses:

    Mailing Address:
    iboss, Inc.
    2602 Challenger Tech Court
    Suite 100
    Orlando, Florida 32826 USA
    ATTN: General Counsel

    Email Address: [email protected]

    We have appointed a representative in the EU. You can contact them by post at Mishcon de Reya Representative Services (Europe) Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland, or by email at [email protected].