Privacy Policy
Last Updated: August 01, 2026 | Version 1.0
At HarkX Technologies Global Private Limited ("HarkX," "we," "our," or "us"), protecting the confidentiality, integrity, availability, and security of information is fundamental to the design, operation, and improvement of our platform and services. This Privacy Policy explains how HarkX collects, uses, processes, stores, safeguards, and discloses information when individuals or organizations access our website, applications, APIs, integrations, and AI-powered cybersecurity services (collectively, the “Services”).
HarkX provides enterprise cybersecurity, AI-driven security operations, threat detection, incident investigation, workflow automation, and security orchestration capabilities designed to assist organizations in managing operational security functions at scale.
By accessing or using the Services, you acknowledge that you have reviewed and understood this Privacy Policy.
Depending on the circumstances, HarkX acts either as a controller (or equivalent under applicable law) or as a processor/service provider. HarkX acts as a controller when processing Personal Data relating to website visitors, prospective customers, account administrators, and business operations. HarkX acts as a processor or service provider when processing Customer Data on behalf of customers in connection with the Services, in accordance with applicable agreements and any applicable Data Processing Agreement ("DPA").
1. Scope and Applicability
This Privacy Policy applies to information collected through:
- The HarkX website
- Customer accounts and administrative portals
- Product demonstrations and evaluations
- Customer onboarding and support interactions
- APIs, integrations, and connected services
- Marketing communications and events
- Use of the Services
This Privacy Policy does not apply to third-party products, platforms, websites, or services that integrate with HarkX or are linked through the Services. Those third-party services operate independently and are governed by their own privacy notices and policies. The Services are intended solely for enterprise and business use.
2. Information We Collect
HarkX collects information reasonably necessary to provide, secure, support, and improve the Services.
Such information may include the following categories:
- Information Provided Directly by Users – Information voluntarily submitted to HarkX may include names, business contact information, company details, account credentials, billing information, support communications, and information submitted through onboarding, account creation, procurement, contract execution, or other interactions with the Services. This may include full legal name, professional email address, corporate affiliation, and telephone number.
- Technical and Operational Information – HarkX may automatically collect technical and operational information necessary for functionality, performance, and security, including IP addresses, device and browser information, authentication records, usage telemetry, API metadata, timestamps, session activity, log files, and security monitoring data.
- Customer Security and Operational Data – As part of providing cybersecurity functionality, HarkX may process customer-generated security and operational data under customer instructions and applicable agreements. Depending on customer configurations, this may include security alerts, event logs, endpoint and cloud telemetry, identity and access information, directory service data, email and collaboration security metadata, application logs, investigation records, workflow data, and information received from integrated tools and platforms. Certain logs or operational records may incidentally contain personal, confidential, or business information. HarkX processes such information solely to provide, secure, maintain, support, and improve the Services.
3. Use of Information
HarkX processes information for legitimate business and operational purposes, including to provide, secure, maintain, support, and improve the Services; authenticate users; monitor platform performance and security; respond to customer requests; investigate fraud, abuse, or security incidents; comply with legal obligations; and protect the rights, security, and property of HarkX, customers, and users. Where required by applicable law, HarkX processes Personal Data based on contractual necessity, legitimate interests, consent, and compliance with legal obligations.
HarkX incorporates artificial intelligence, machine learning, and automation technologies to support cybersecurity operations, including threat correlation, alert analysis, incident investigation assistance, and AI-assisted security recommendations. Where third-party cloud infrastructure providers support platform functionality, HarkX implements contractual, technical, and organizational safeguards designed to protect customer information and limit processing to authorized purposes.
HarkX processes Personal Data based on consent, contractual necessity, compliance with legal obligations, applicable statutory permissions, or other lawful grounds available under applicable law.
5. Third-Party Services
HarkX may disclose information to trusted third-party providers, subprocessors, and integrated service providers that support operation of the Services, including cloud infrastructure providers, authentication platforms, analytics providers, communications vendors, cybersecurity tools, customer support systems, and payment processors. The Services may also integrate with third-party technologies such as SIEM platforms, endpoint security tools, collaboration systems, identity providers, and workflow platforms. Customers remain responsible for reviewing and managing their own integration configurations and permissions. These parties are authorized to process information only as necessary to provide services on HarkX’s behalf and are subject to appropriate confidentiality and security obligations. HarkX may also disclose information where necessary to comply with applicable law, enforce agreements, investigate security incidents or unlawful activity, or protect the rights, security, and property of HarkX, customers, users, or the public. In connection with mergers, acquisitions, reorganizations, or asset transfers, information may be transferred subject to applicable confidentiality and security obligations.
6. Data Retention
HarkX retains information only for as long as reasonably necessary to provide and support the Services, fulfill contractual obligations, maintain operational and security records, resolve disputes, enforce agreements, and comply with applicable legal or regulatory requirements. Retention periods may vary depending on the type of information, customer configurations, operational requirements, and applicable law. When information is no longer required, HarkX takes commercially reasonable measures designed to securely delete or render such information inaccessible. Basic administrative and customer communication details may be retained for legitimate business, legal, security, and support purposes, subject to applicable retention and access controls.
Where Personal Data is no longer required for the purposes for which it was collected or processed, and retention is not required by applicable law, HarkX will take commercially reasonable measures to securely delete, anonymize, or otherwise render such Personal Data inaccessible in accordance with applicable legal and contractual requirements.
7. International Data Transfers
HarkX and its service providers may process information in jurisdictions outside the country in which it was originally collected where necessary to provide the Services or as agreed with the customer. Where cross-border transfers of Personal Data occur, HarkX implements appropriate safeguards as required by applicable law and applicable customer agreements. Where customers require data to be stored or processed within a particular jurisdiction, HarkX will process such information in accordance with the applicable contractual commitments.
8. Changes to This Privacy Policy
HarkX may update this Privacy Policy from time to time to reflect changes in technology, applicable law, operational practices, security measures, or Service offerings. Material changes may be communicated through the website, platform notifications, email communications, or other appropriate channels. Unless otherwise stated, updates become effective upon posting. Continued use of the Services following the effective date constitutes acceptance of the revised Privacy Policy. Users are encouraged to review this Privacy Policy periodically.
9. Privacy Rights and Contact Information
Individuals may have certain rights regarding their Personal Data under applicable law. Subject to applicable legal requirements and any applicable contractual obligations, individuals may have the right to:
- request access to Personal Data processed by HarkX;
- request correction, updating, or deletion of inaccurate or incomplete Personal Data;
- withdraw consent where processing is based on consent;
- object to or request restriction of processing where provided by applicable law;
- submit privacy-related inquiries or complaints regarding HarkX's processing activities.
HarkX will respond to applicable requests in accordance with applicable law and any contractual obligations governing the Services.
Privacy-related requests or questions may be submitted to:
Legal Team
HarkX Technologies Global Private Limited
Email: legal@harkx.ai
10. Children's Privacy
The Services are intended solely for enterprise and business use and are not directed to children. HarkX does not knowingly collect Personal Data directly from children through the Services. Where HARKX becomes aware that Personal Data relating to a child has been collected in a manner inconsistent with applicable law, HarkX will take commercially reasonable steps to delete or otherwise address such information in accordance with applicable legal requirements. Where applicable law requires parental or guardian authorization for the processing of Personal Data relating to children, such processing will be conducted only in accordance with applicable legal requirements.