Privacy Policy
Last updated: October 2026
SunuCyberSecurity is a division of SunuTechnology, based in Dakar, Senegal. We're a cybersecurity company — protecting data isn't just a legal formality for us, it's what we do. Here's how we handle yours.
1. What data do we collect?
Depending on how you use SunuCyberSecurity, we may collect: your contact details (name, email, company, industry), your account information (credentials, preferences), the results of the security scans you run on your own infrastructure, a few technical details tied to your connection (IP address, browser, device) used only for security and to keep the service running properly, and the content of your exchanges with our support team.
2. Where does this data come from?
Most of it comes directly from you: when you create your account, run a scan, or contact us. Some is generated automatically as you use the platform. The rest comes through our technical service providers, described in the next section.
3. How do we use this data?
First, to run the platform: executing your scans, generating your reports, managing your account and subscription, and giving you responsive support. It also helps us keep the service secure: spotting fraudulent or malicious use, protecting accounts, and meeting our legal obligations when they apply. What it's never used for: advertising or targeted marketing. That's simply not our model.
4. Legal bases for processing
We process your data on one of the following legal bases: performance of the contract between us (account creation, subscription, running the scans you launch, support); our legitimate interest in securing the platform and preventing fraudulent use (technical connection data, security logs); compliance with a legal obligation where applicable (for example accounting obligations, or a request from a competent authority); and your explicit consent for any optional communications you choose to receive. You may withdraw this consent at any time, without affecting the service itself.
5. Storage and security
Everything you send us is encrypted in transit and at rest (TLS 1.3), on secure enterprise-grade infrastructure — we hold our own systems to the same standard we recommend to our clients.
6. Data breach notification
Should a data breach occur that's likely to result in a risk to your rights and freedoms, we commit to informing you as soon as possible, and no later than 72 hours after becoming aware of it — the same timeframe set by the European GDPR. Where required by law, we will also inform Senegal's Commission de Protection des Données Personnelles (CDP) or any other competent authority.
7. How do we share this data?
We never sell your data. It's only shared with the providers strictly necessary to run the service: Resend for our transactional emails, and depending on the payment method you choose, PayPal, Kkiapay, or Orange Money to process your payments — each governed by its own privacy policy. We may also share data if required by law, or to protect our rights and our users' rights against genuine malicious use.
8. International transfers
SunuCyberSecurity is based in Dakar, Senegal. Depending on our technical hosting choices, your data may be processed and stored outside Senegal, including in jurisdictions with recognized data protection standards. We choose our hosting providers specifically for their level of security and data protection.
9. Data retention
Account data is kept for as long as your account stays active. Scan results follow your plan: 30 days on Free, 90 days on SunuEssential, unlimited on SunuAdvanced and SunuElite.
10. Children's data
SunuCyberSecurity isn't intended for minors. We don't knowingly collect data from anyone under the legal age in their country of residence. If you believe a minor has shared data with us, write to privacy@sunucybersecurity.com and we'll delete it.
11. Cookies
We keep it simple: only the cookies strictly necessary to run the platform (login, session) are used. No advertising cookies, no third-party trackers.
12. Your rights
You stay in control of your data: the right to access, correct, delete, and port it — in line with Senegalese data protection law, applicable BCEAO/COBAC regulations, the European GDPR, and the data protection regulations of your own country of residence where applicable. You can also object to a specific use of your data or withdraw consent you previously gave. One email to privacy@sunucybersecurity.com is all it takes.
13. Complaints
Not happy with how we're handling your data? Contact us first — we'd rather sort it out directly. You also have the right to file a complaint with Senegal's Commission de Protection des Données Personnelles (CDP), or with the data protection authority competent for your own country of residence, where one exists.
14. Contact
Got a question about your data? Reach our data protection officer directly at privacy@sunucybersecurity.com.