Sally AI

Privacy Policy

This Privacy Policy ("Policy") is effective as of (Insert Date) and is made by and between Cyber Alliance Consortium LLC ("CyberAlliance"), with its principal place of business at 711 Six Forks Rd, Raleigh, NC 27609, and the users ("Users", "you", or "your") of the Sally AI platform ("Sally"), collectively referred to as the "Parties".

WHEREAS, CyberAlliance has developed and operates Sally, an AI-powered platform with functionalities including conversational interfaces (Sally Chat) and secure code analyst (Sally Code) that process user data and provide AI-generated responses across various interfaces, including websites, APIs, IDE plugins, and mobile applications.

WHEREAS, CyberAlliance is committed to safeguarding the privacy and security of user data in compliance with applicable data privacy laws, such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regulations.

WHEREAS, this Policy outlines how Sally collects, uses, stores, transfers, and protects personal data, as well as the rights users have concerning their personal information.

NOW, THEREFORE, the Parties agree to the following terms and conditions as set forth in this Policy:

This Policy applies to all users of the Sally platform and covers all interactions and data processed through Sally, including but not limited to user uploads, conversation history, and AI-generated outputs
The duration of this Policy is from the effective date stated above until terminated by CyberAlliance, either through significant changes in policy communicated to users or through cessation of the Sally platform's services. Users will be notified of any substantial changes to this Policy.

1. Introduction And Scope

This Policy governs the manner in which CyberAlliance collects, uses, discloses, and safeguards personal information through its AI-driven cybersecurity platform, Sally.

Sally is designed to provide domain-specific artificial intelligence tools—including conversational agents (Sally Chat) and secure code assistance features (Sally Code)—to support cybersecurity professionals and organizations. This Policy applies to all users who interact with Sally across any supported interface, including websites, APIs, IDE plugins, and mobile applications.

This Policy outlines:

The categories of personal information we collect;
How and why we process your information;
Your rights and choices with respect to your personal data;
How we protect your information;
And how you can contact us regarding our privacy practices.

Scope of this Policy

All data collected through the use of the Sally platform;
Communications, interactions, and content submitted via Sally Chat, Sally Code, or related features;
AI-generated outputs derived from user interactions;
Any other personal data processed through CyberAlliance’s services related to Sally.

This Policy does not apply to third-party platforms or services that may be integrated with or linked to Sally. We encourage you to review the privacy policies of any such third-party services before providing them with your information.

By using Sally, you acknowledge that you have read and understood this Policy, and you consent to the practices described herein.

2. Types Of Personal Data Collected

Personal Data You Provide Directly

We collect information you voluntarily provide when you create an account, interact with Sally, or communicate with us:

Account Information: When you register for Sally or access certain features, we may collect your name, email address, organization name, account credentials, date of birth, payment details, and transaction history (collectively, “Account Information”).
User Content: When you use Sally Chat, Sally Code, or related interfaces, we collect the content you submit, such as prompts, messages, uploaded files, code snippets, documents, images, or audio recordings (“User Content”). This includes content shared via APIs, IDE plugins, or browser-based tools.
Communication Information: If you contact us through support channels, email, or social media, we collect your contact details and the content of your communications (“Communication Information”).
Other Information You Provide: We may also collect data when you participate in research studies, surveys, user testing, promotional events, or provide verification documents to confirm your identity or age (“Other Provided Information”).

Personal Data We Collect Automatically

When you interact with Sally, we automatically collect technical and usage data to operate, secure, and optimize our services (“Technical Information”):

Log Data: Your browser or device sends information such as IP address, browser type, operating system, referring URLs, timestamps, and feature usage details when you use Sally.
Usage Data: We monitor your interactions with Sally to understand how you use different features, including what you engage with, the frequency and duration of usage, device language, session times, and related metadata.
Device Information: We collect technical data about the device used to access Sally, including device type, operating system, device identifiers, browser version, and hardware details.
Location Information: We infer your general location (e.g., city or country) from your IP address to enhance account security, detect anomalies, and tailor your experience. If permitted, certain features may request precise GPS-based location data from your device.
Cookies and Similar Technologies: We use cookies, local storage, and other tracking technologies to manage sessions, store user preferences, enhance security, and analyze user behavior. For more information, please see our Cookie Policy.

Information from Third Parties

We may receive Personal Data from third-party sources, including:

Security Vendors and Partners: To help detect and prevent fraud, abuse, or misuse of Sally, and to enhance account protection.
Marketing and Lead Generation Partners: To identify potential business customers or inform outreach efforts based on business-related public or licensed data.
Publicly Available Sources: In limited cases, we may use publicly available datasets (such as source code repositories, security blogs, or open databases) to improve the machine learning models underlying Sally, in compliance with applicable laws and data ethics guidelines.

3. How we use Personal Data

CyberAlliance may use your Personal Data for the following purposes in connection with your use of the Sally platform:

To Operate and Provide the Sally Platform: We use Personal Data to deliver Sally’s core functionality, including responding to your prompts in Sally Chat, assisting with secure code generation in Sally Code, and enabling access through websites, APIs, IDE plugins, and mobile interfaces.
To Improve and Develop Sally: We analyze usage patterns, feedback, and technical data to enhance Sally’s performance, develop new features, and ensure the platform evolves to meet user needs effectively and securely.
To Communicate with You: We use your contact information to send administrative messages, respond to inquiries, notify you of updates or changes to the Services, and inform you of events, research opportunities, or new features that may be relevant to your use of Sally.
To Ensure Security and Prevent Abuse: We process Personal Data to detect, investigate, and mitigate fraudulent activity, abuse, unauthorized access, or other misuse of the Sally platform. This includes monitoring for anomalous behavior or potential cybersecurity threats.
To Comply with Legal Obligations: We may process your data as required by applicable laws, regulations, or legal processes, or to protect the rights, safety, and property of our users, CyberAlliance, or third parties.

We may also aggregate or de-identify Personal Data so it no longer identifies any individual. This information may be used for analytics, research, product development, or performance optimization. CyberAlliance will maintain such data in its de-identified form and will not attempt to re-identify it unless required by law.

4. Disclosure of Personal Data

CyberAlliance may disclose your Personal Data collected through the Sally platform under the following circumstances:

Vendors and Service Providers: We may share Personal Data with third-party vendors and service providers who help us operate, support, and improve the Sally platform. This includes providers of infrastructure and hosting services, cloud computing platforms, customer support, monitoring and analytics, payment processors, communication tools, and other technical and administrative services. These third parties are authorized to access, process, or store Personal Data only as needed to perform services on our behalf and are bound by contractual obligations to protect that data.
Business Transfers: In the event of a merger, acquisition, restructuring, bankruptcy, or other corporate transaction (“Transaction”), your Personal Data may be shared with relevant parties during due diligence and may be transferred to a successor or affiliated entity as part of the assets involved in the Transaction.
Legal and Regulatory Disclosures: We may disclose Personal Data to government agencies, regulatory bodies, or other third parties when required to do so by law or if we believe, in good faith, that such disclosure is reasonably necessary to:
- Comply with legal obligations or respond to lawful requests;
- Enforce or investigate violations of our Terms or other policies;
- Prevent fraud, abuse, or other illegal activity;
- Protect the safety, integrity, and rights of users, CyberAlliance, or the public;
- Defend against legal claims or protect against legal liability.
Affiliates: We may disclose Personal Data to our corporate affiliates—entities under common ownership or control with CyberAlliance—for purposes consistent with this Policy, such as internal business operations, customer support, and platform development.
Organizational and Enterprise Accounts: If you register for Sally using an email address associated with a business, educational institution, or other organization, or if you join a team or enterprise account, CyberAlliance may share account-related information (such as your email address or usage status) with the relevant organization to facilitate account management or administrative control. The organization may have the ability to access or manage your use of Sally in accordance with its own internal policies.
Other Users and Authorized Third Parties: Some features of Sally may allow you to share outputs, code snippets, or interactions with other users or integrated third-party services (e.g., web search tools, IDE plugins, or collaboration tools). When you use such features, the data you choose to share may be viewable or accessible by those recipients. Any data shared with third parties will be subject to their own privacy policies and terms, which we encourage you to review before using such integrations.

5. Retention of Personal Data

CyberAlliance retains Personal Data collected through the Sally platform only for as long as necessary to fulfill the purposes for which it was collected, including to provide and maintain the Sally Services, to comply with our legal and regulatory obligations, to resolve disputes, to enforce our agreements, and for legitimate business and operational interests.

The specific retention period for Personal Data depends on several factors, including but not limited to:

The purpose for which the data was collected and whether continued retention is necessary to fulfill that purpose (e.g., maintaining your account, delivering AI-generated outputs, or supporting customer service requests);
The nature, volume, and sensitivity of the Personal Data;
The potential risk of harm from unauthorized use or disclosure;
Legal, regulatory, tax, accounting, or reporting obligations under applicable laws, including U.S. federal and state regulations (e.g., CCPA) and international laws (e.g., GDPR);
Any user-defined preferences or settings related to data retention or deletion (where applicable).

When Personal Data is no longer necessary for these purposes, we will securely delete, anonymize, or aggregate it, unless further retention is required by law. For example, we may retain certain data to comply with financial recordkeeping requirements, protect against fraud, or preserve security logs.

If you request deletion of your account or specific Personal Data, we will process your request in accordance with applicable laws and our internal retention and deletion protocols. Some residual data may remain in backup systems for a limited period as part of our disaster recovery and business continuity processes.

6. Your Rights

Depending on your jurisdiction, you may have certain rights under applicable data protection laws with respect to the Personal Data we collect and process through Sally. These rights may include:

Right to Access – You may request access to the Personal Data we hold about you, along with information on how and why we process it.
Right to Deletion – You may request that we delete your Personal Data, subject to any legal or contractual obligations that require us to retain certain data.
Right to Correction – You may request that we correct or update inaccurate or incomplete Personal Data.
Right to Data Portability – Where technically feasible, you may request a copy of your Personal Data in a structured, commonly used, and machine-readable format.
Right to Restrict Processing – You may request that we limit the processing of your Personal Data in certain circumstances, such as during the review of a correction request.
Right to Withdraw Consent – Where we rely on your consent to process Personal Data, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Right to Object – You may object to our processing of your Personal Data based on legitimate interests or direct marketing.
Right to Lodge a Complaint – If you believe we have violated your privacy rights, you may lodge a complaint with your local data protection authority.

You can exercise many of these rights through your Sally account settings (where applicable). If you are unable to do so or require additional assistance, please contact us at info@cyber-alliance.com or write to us at:

Cyber Alliance Consortium LLC
711 Six Forks Rd
Raleigh, NC 27609
United States

We will review and respond to your request in accordance with applicable data protection laws, and may ask you to verify your identity before taking action.

Note on AI-Generated Content Accuracy

Sally’s responses are generated using probabilistic language models based on your input. While we strive to ensure output quality, responses may occasionally include information that is incorrect, outdated, or misleading. If Sally generates content about you that is factually inaccurate and you wish to request correction or removal, please contact us at info@cyber-alliance.com. We will assess such requests in line with applicable laws and technical limitations of the models.

International Data Transfers

Your Personal Data may be processed and stored on servers located in the United States and other jurisdictions where CyberAlliance or its service providers operate. Regardless of location, we apply the protections described in this Policy and implement legally approved data transfer mechanisms, such as Standard Contractual Clauses (SCCs), to safeguard your Personal Data when transferred across borders.

7. Children

Sally is not directed to, and is not intended for use by, children under the age of 13. We do not knowingly collect or solicit Personal Data from individuals under 13 years old. If you believe that a child under 13 has provided Personal Data to CyberAlliance through the Sally platform, please contact us immediately at info@cyber-alliance.com. We will investigate the report and, if appropriate, delete the information from our systems in accordance with applicable laws.

Users under the age of 18 must have permission from a parent or legal guardian to use the Services. By using Sally, you confirm that you meet these age requirements or have received appropriate parental or guardian consent.

8. Security

We use commercially reasonable technical, administrative, and organizational safeguards to protect your Personal Data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. Despite these measures, no method of transmission over the internet or electronic storage is completely secure or error-free. Therefore, please exercise caution when sharing personal information through the Sally platform. Additionally, we are not responsible for any breaches resulting from the circumvention of security or privacy controls on our Services or on third-party websites.

9. Additional U.S. State Disclosures

Certain U.S. state privacy laws require specific disclosures. The table below outlines additional details about the categories of Personal Data we collect, as well as how we use and share that information. For more information, please refer to the sections above: “Personal Data We Collect” for details on the data sources, “How We Use Personal Data” for its usage, and the “Security and Retention” section below for information on how we protect and retain your data.

Category of Personal Data	Use of Personal Data	Disclosure of Personal Data
We collect the following types of information, as detailed above: Identifiers, including your name, contact details, IP address, and other device-specific identifiers Commercial information, such as your transaction history Network activity data, including the Content you provide and your interactions with our Services Communication information, like your contact details when you reach out to us via email Geolocation data, which may include the general area of your device’s access based on IP address, or more precise location data you voluntarily provide Account credentials and payment information	We use this information for the purposes outlined above, including to: Provide, analyze, and maintain our Services Improve and develop our Services and conduct research Communicate with you, including sending updates about our Services and events Prevent fraud, unlawful activities, or misuse of our Services, and safeguard the security of our systems Comply with legal requirements and protect the rights, privacy, safety, and property of our users, Sally, and third parties	We may share this information under the following circumstances, as detailed above: With vendors, service providers, and affiliates who process the data on our behalf and according to our instructions With government authorities or other third parties when required by law or for the legal purposes described above With parties involved in business transactions such as mergers or acquisitions With business account administrators as outlined above With other users and third parties you interact or share information with

Category of Personal Data

Use of Personal Data

Disclosure of Personal Data

We collect the following types of information, as detailed above:

Identifiers, including your name, contact details, IP address, and other device-specific identifiers
Commercial information, such as your transaction history
Network activity data, including the Content you provide and your interactions with our Services
Communication information, like your contact details when you reach out to us via email
Geolocation data, which may include the general area of your device’s access based on IP address, or more precise location data you voluntarily provide
Account credentials and payment information

We use this information for the purposes outlined above, including to:

Provide, analyze, and maintain our Services
Improve and develop our Services and conduct research
Communicate with you, including sending updates about our Services and events
Prevent fraud, unlawful activities, or misuse of our Services, and safeguard the security of our systems
Comply with legal requirements and protect the rights, privacy, safety, and property of our users, Sally, and third parties

We may share this information under the following circumstances, as detailed above:

With vendors, service providers, and affiliates who process the data on our behalf and according to our instructions
With government authorities or other third parties when required by law or for the legal purposes described above
With parties involved in business transactions such as mergers or acquisitions
With business account administrators as outlined above
With other users and third parties you interact or share information with

Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have certain rights regarding your Personal Data collected through Sally, including:

The right to access information about how we process your Personal Data, including the right to obtain a copy of your Personal Data in a portable format;
The right to request the deletion of your Personal Data;
The right to correct or update your Personal Data;
The right to be free from discrimination for exercising your privacy rights.

We do not sell Personal Data, share it for cross-contextual behavioral advertising, nor do we process Personal Data for targeted advertising purposes as defined by applicable state privacy laws. We also do not use sensitive Personal Data to infer consumer characteristics.

How to Exercise Your Rights

You can exercise your privacy rights by submitting a request by emailing us at info@cyber-alliance.com.

Verification Process

To protect your data, we may require you to verify your identity before processing requests to access, correct, or delete Personal Data. If you do not have a Sally account or if we detect suspicious activity, we may ask for additional information to confirm your identity. If we cannot verify you, we won’t be able to fulfill your request.

Authorized Representatives

You may also have an authorized agent submit requests on your behalf. Agents must provide written authorization signed by you, and you may need to verify your identity with us independently. Agent requests can be sent to info@cyber-alliance.com.

Appeals

If you disagree with a decision regarding your privacy rights request, you may have the right to appeal. Appeals can be submitted to info@cyber-alliance.com.

10. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device when you visit websites or use online services. They help websites remember your preferences, improve functionality, and gather information about how you interact with the service.

How We Use Cookies

Sally uses cookies and similar tracking technologies to:

Ensure the proper functioning and security of our Services;
Remember your preferences and settings;
Analyze usage patterns to improve and optimize our platform;
Provide personalized experiences and relevant communications;
Detect and prevent fraud and abuse.

Types of Cookies We Use

Essential Cookies: These are necessary for the operation of the Sally platform and cannot be disabled, as they enable core features such as account login and security.
Performance and Analytics Cookies: These cookies collect information about how you use Sally, such as pages visited, time spent, and error reports. This helps us understand and improve our Services.
Functional Cookies: These remember choices you make (like language or region) to enhance your experience.
Advertising and Tracking Cookies: Sally does not use cookies for targeted advertising or cross-site tracking.

Third-Party Cookies

We may allow trusted third-party service providers, such as analytics and security vendors, to place cookies on your device. These third parties only use your data as permitted under their own privacy policies, and we do not control their use of cookies.

Managing Cookies

You can manage or disable cookies through your browser settings or device preferences. However, please note that disabling certain cookies may affect the functionality or performance of Sally. For detailed instructions on managing cookies, please refer to your browser’s help documentation.

Updates to Our Cookie Policy

We may update this Cookies and Tracking Technologies section from time to time. We will notify you of any significant changes through our Services or via email.

11. Changes to the Policy

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law.

12. How to Contact Us

If you have any questions or concerns not already addressed in this Privacy Policy, please contact us at info@cyber-alliance.com.

Category of Personal Data	Use of Personal Data	Disclosure of Personal Data
We collect the following types of information, as detailed above: Identifiers, including your name, contact details, IP address, and other device-specific identifiers Commercial information, such as your transaction history Network activity data, including the Content you provide and your interactions with our Services Communication information, like your contact details when you reach out to us via email Geolocation data, which may include the general area of your device’s access based on IP address, or more precise location data you voluntarily provide Account credentials and payment information	We use this information for the purposes outlined above, including to: Provide, analyze, and maintain our Services Improve and develop our Services and conduct research Communicate with you, including sending updates about our Services and events Prevent fraud, unlawful activities, or misuse of our Services, and safeguard the security of our systems Comply with legal requirements and protect the rights, privacy, safety, and property of our users, Sally, and third parties	We may share this information under the following circumstances, as detailed above: With vendors, service providers, and affiliates who process the data on our behalf and according to our instructions With government authorities or other third parties when required by law or for the legal purposes described above With parties involved in business transactions such as mergers or acquisitions With business account administrators as outlined above With other users and third parties you interact or share information with