Privacy Policy

Shuraya Labs ("we", "us", or "our") operates the Shuraya Labs platform — a cybersecurity education service available at shurayalabs.com. We are committed to protecting your personal information and being transparent about what we collect and why.

By using our platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please stop using the service.

• Contact information: Your name, company name, email address, and phone number when you submit an inquiry, contact form, or join our waitlist.
• Engagement details: The services you express interest in, project requirements, and any information you share during scoping or a security assessment.
• Usage data: Pages visited, device type, browser, IP address, and UTM parameters for analytics.

• Respond to your inquiries and scope the right cybersecurity or software services for you.
• Communicate with you about proposals, projects, and engagements.
• Send transactional emails (inquiry confirmations, follow-ups).
• Send occasional newsletters and updates — you can unsubscribe at any time.
• Improve our website through aggregated analytics.
• Prevent fraud and enforce our Terms of Service.

We share data with the following services only to the extent necessary:

• Google — authentication for our internal team (Google OAuth). Subject to Google's Privacy Policy.
• Resend — transactional and marketing emails.
• Neon.tech — database hosting (PostgreSQL, Singapore region).
• Vercel — website hosting and delivery.

We do not sell your personal data to any third party.

Your data is stored on servers operated by Neon.tech in the Singapore region, and our website is hosted on Vercel's global infrastructure. By using the service, you consent to your data being transferred to and stored in these locations.

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 90 days. Aggregate, anonymised analytics data may be retained indefinitely.

You have the right to:

• Access — request a copy of all data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request that we delete your personal data.
• Opt out — unsubscribe from marketing emails at any time.

To exercise any of these rights, email us at privacy@shurayalabs.com.

We use only one essential cookie: the NextAuth session cookie, which keeps you logged in. We do not use advertising or tracking cookies. You can block cookies in your browser, but doing so will prevent you from staying logged in.

Our service is not directed at persons under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

For any privacy-related questions or requests, contact us at: privacy@shurayalabs.com