Privacy Policy

Effective date: February 11, 2026

Armex provides web application firewall (WAF) and related cybersecurity services. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices available to users of our website, dashboard, APIs, and security platform (collectively, the "Services").

By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.

1. Information We Collect

We collect information necessary to operate, secure, and improve Armex. The categories may include:

• Account and identity details, such as name, company, role, email address, and authentication credentials.
• Billing and transaction data needed for subscription management and payment processing.
• Technical and device information, such as IP address, browser type, operating system, and usage events.
• Security telemetry produced by WAF services, including request metadata, threat indicators, and mitigation logs.
• Support communications and records when you contact our team.

2. How Information Is Collected

• Directly from you when creating an account, requesting a demo, contacting support, or purchasing services.
• Automatically through cookies, log files, SDKs, and similar technologies when using our Services.
• From integrations or authorized third-party tools that you choose to connect.
• From customers who submit information to configure and protect their applications using Armex.

3. Why We Process Personal Data

We process data only where we have a valid legal basis, including contractual necessity, legitimate interests, legal obligations, and consent where required.

• Delivering WAF protection, threat detection, traffic filtering, and incident response features.
• Operating accounts, subscriptions, invoices, and service notifications.
• Troubleshooting issues, improving product reliability, and preventing fraud or abuse.
• Sending product updates and marketing communications (you can opt out at any time).
• Meeting compliance, audit, and legal requirements.

4. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session management, security, analytics, and performance optimization. You can adjust cookie preferences in your browser settings, but disabling certain cookies may affect core functionality.

5. Data Retention

We retain personal data for as long as needed to provide the Services and fulfill legal or security obligations. Retention periods vary by data type. For example, account records may be kept during the customer relationship and for a limited period after closure, while selected security logs may be retained longer when required for investigation, compliance, or dispute resolution.

6. How We Share Information

Armex does not sell personal data. We may share information in these cases:

• With trusted subprocessors that help us provide infrastructure, payment, support, analytics, and communication services.
• With your instruction or consent, for example when enabling third-party integrations.
• To comply with law, regulation, court order, or lawful governmental request.
• To protect Armex, our customers, or others from security threats, fraud, or misuse.
• As part of a merger, acquisition, financing, or asset transfer, subject to appropriate safeguards.

7. International Transfers

If data is transferred across borders, Armex applies legally recognized transfer mechanisms and contractual safeguards as required by applicable privacy laws.

8. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export certain personal data, and to withdraw consent where processing relies on consent. You may also have the right to lodge a complaint with your local data protection authority.

To submit a request, contact us at support@armex-apps.com.

9. Security Measures

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Children's Data

Armex Services are not directed to children under 16, and we do not knowingly collect personal data from children. If we learn that such data has been collected without appropriate authorization, we will take reasonable steps to delete it.

11. Third-Party Services and Links

Our website and platform may include links to third-party websites or integrations. Their privacy practices are governed by their own policies, and Armex is not responsible for those third-party practices.

12. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date. Continued use of the Services after changes become effective means you accept the updated policy.