Privacy Policy
Effective date: August 23, 2026. Last reviewed: August 23, 2026.
1. Who we are
AdminNow is operated by CySec Firm, LLC ("AdminNow," "we," "us," or "our"). This policy applies to the AdminNow marketing website (adminnow.net) and the AdminNow cloud console (app.adminnow.net), together the "Service." It does not apply to the AdminNow Windows Service or client applications running on your own infrastructure, which do not transmit data to us except where you configure them to forward evidence or telemetry to the cloud console.
2. Information we collect
Account and contact information. When an administrator is provisioned, we collect an email address, an organization name, and an assigned role. If you contact us for support, we collect whatever information you provide in that communication.
Authentication data. We store a hash of each sign-in code and public-key credential data for passkeys (WebAuthn). We never store passwords or plaintext sign-in codes.
Workstation and elevation data. If your organization enrolls a workstation, the cloud console receives and stores the data your administrators configure it to receive: elevation session records, policy assignments, detection and alert data, and evidence records (which may include command lines, file paths, process metadata, and, where your policy enables it, session recordings). This data originates from your own endpoints and is under your organization's control.
Billing information. If you subscribe to a paid plan, payment card data is collected directly by our payment processor and is never transmitted to or stored on our servers. We retain records of invoices, subscription tier, and payment status.
Technical and usage data. Like most web services, our servers and hosting provider automatically log IP address, browser and device type, pages visited, and timestamps for security and operational purposes.
Cookies and similar technologies. See Section 5 below.
3. How we use information
- To provide, operate, and maintain the Service, including authentication, policy enforcement, and alerting;
- To detect, investigate, and prevent security incidents, fraud, and abuse;
- To process payments and maintain accounting and invoice records;
- To communicate with you about your account, including service notices, security alerts, and billing notices;
- To comply with legal obligations and enforce our Terms and Conditions;
- To improve and develop the Service.
4. Legal bases for processing (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract with your organization; our legitimate interests in operating, securing, and improving the Service; compliance with legal obligations (including tax and accounting requirements); and, where applicable, your consent (for example, for non-essential cookies).
5. Cookies and similar technologies
The AdminNow marketing website uses only strictly necessary cookies today (for example, to remember your cookie preference). The AdminNow cloud console uses a session cookie required for you to stay signed in, and, for Global Admins, a cookie that records which organization you are currently viewing. These are strictly necessary and are not used for advertising or cross-site tracking. If we introduce analytics or other non-essential cookies in the future, we will request your consent first through the cookie banner presented on this site, and you may withdraw that consent at any time by clearing the banner's stored preference in your browser.
6. How we share information
We do not sell personal information. We share information only with the following sub-processors and parties, each bound by contractual confidentiality and security obligations:
- Cloudflare, Inc. — hosts the Service and stores data on our behalf (compute, database, and object storage);
- Stripe, Inc. — processes subscription payments and stores billing/payment data for accounts on a paid plan; we never receive or store your raw card details ourselves;
- Our email delivery provider, solely to send sign-in codes and account notices;
- Law enforcement or other parties where required by law, legal process, or to protect the rights, property, or safety of AdminNow, our customers, or others;
- A successor entity in connection with a merger, acquisition, or sale of assets.
A current, itemized list of sub-processors, the data each one processes, and where it is located is maintained in our Data Processing Addendum.
7. Data retention
We retain account, billing, and invoice records for seven (7) years from the date of the relevant transaction, to satisfy tax, accounting, and financial record-keeping obligations. Where a specific data element is not itself required to be kept for that period (for example, granular evidence or alert data underlying an invoice, as opposed to the invoice and payment record itself), we may anonymize or delete it sooner, according to the retention settings your organization configures or a default retention period disclosed in your order form. We may retain data longer where necessary to resolve disputes, enforce our agreements, or comply with law.
8. International data transfers
We are based in the United States, and information we collect may be processed and stored in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers of personal data out of the European Economic Area, the United Kingdom, or Switzerland.
9. Your privacy rights
If you are in the EEA, UK, or Switzerland, you have the right to access, correct, delete, or restrict our use of your personal data, to receive a copy of it in a portable format, to object to certain processing, to withdraw consent at any time, and to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction of it, and to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising these rights.
If you are located elsewhere, we will honor requests consistent with applicable local law to the extent reasonably practicable.
To exercise any of these rights, contact us using the details in Section 12. Because AdminNow is typically deployed by an employer or organization, if you are an end user of a customer's deployment (rather than our direct customer), we may direct your request to that organization, which controls the underlying data.
10. Children's privacy
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from children under 16.
11. Security
We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, or destruction, including encryption in transit, hashed credential storage, and role-based access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Contact us
Questions about this policy or requests regarding your personal data can be sent to privacy@adminnow.net.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the effective date above; material changes will be communicated to administrators by email where practical.