Diamond Bright CyberGuard

Privacy Policy

How Diamond Bright LLC collects, uses, and protects information when you use Diamond Bright CyberGuard, diamondguards.com, assessments, and the client portal.

1. Who we are

Diamond Bright LLC operates Diamond Bright CyberGuard and the public website diamondguards.com, including related client portal and assessment services (collectively, the “Services”). For privacy questions, contact [email protected] or call (618) 936-8308.

2. Information we collect

Depending on how you use the Services, we may collect:

• Contact and business details you submit (name, business name, email, phone, industry, service area).
• Account credentials for client portal access (email, password hash, optional MFA settings).
• Authorization and scope data you provide for network assessments (authorized subnets, domains, contacts, signatures).
• Service and billing data needed to process packages, invoices, and payments (including limited payment status from processors such as Stripe or Square).
• Technical and security data from assessments, remote node jobs, reports, tickets, messages, and audit logs.
• Website usage data such as basic server logs (IP address, browser/user agent, pages requested, timestamps) for security and reliability.
• Analytics data collected via Google Analytics 4 (GA4) on our public website and related web surfaces, which may include approximate location (derived from IP), device/browser type, pages viewed, referrers, session timing, and similar usage metrics. Google may process this data under its own terms as our analytics provider.

3. How we use information

• Deliver cyber risk assessments, reports, monitoring, and client portal features you request.
• Schedule free or paid assessments, communicate results, and provide support.
• Operate billing, invoices, and payment confirmations.
• Secure our systems (authentication, abuse prevention, audit trails, fraud/security monitoring).
• Understand how visitors use diamondguards.com (and related pages) so we can improve content, navigation, marketing performance, and reliability—using Google Analytics 4 for aggregated traffic and engagement insights.
• Improve service quality and product reliability, using aggregated or operational insights where appropriate.
• Comply with law, enforce agreements, and protect the rights and safety of clients and Diamond Bright LLC.

4. Legal bases / business purposes

We process information to perform a contract or requested service, with your consent where required (for example, marketing communications or scan authorization), for legitimate security and business operations, and to meet legal obligations.

5. Sharing

We do not sell your personal information. We may share information with:

• Service providers that help us host infrastructure, process payments, send email, schedule appointments, or measure website traffic (for example payment processors, email/SMTP providers, booking tools, and Google Tag Manager / Google Analytics / Google LLC), under their respective terms and our configuration of those services.
• Your authorized representatives when you invite them to the client portal or designate contacts.
• Professional advisors or authorities when required by law, court order, or to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate protections.

6. Assessment and security data

Cybersecurity assessments may collect technical findings about networks, assets, vulnerabilities, and configurations within the scope you authorize. This data is treated as confidential client security material. We use it to produce reports, remediation guidance, and managed service deliverables. Public marketing samples are redacted and do not disclose live client data.

7. Cookies, sessions, and analytics

We use essential cookies/session storage to keep you signed in, protect forms (including CSRF tokens), and maintain portal security settings. These are required for core service delivery.

We also use Google Tag Manager (GTM) and Google Analytics 4 (GA4) on our public website and selected related pages. GTM is the tag container (currently GTM-M59TWWKB unless changed in our configuration) that loads analytics and related measurement tags; GA4 measurement ID is currently G-ETRQXDFLGZ unless changed. These tools may set or read cookies and similar technologies (and may use local storage) to collect usage statistics such as pages visited, approximate geography, device/browser information, and traffic sources. Google processes analytics data according to Google’s privacy policy and product terms. We use GTM/GA4 for site performance and marketing insights—not as a third-party advertising network for selling your personal information.

You can limit analytics through browser controls (blocking third-party cookies or scripts), privacy extensions, or Google’s available opt-out mechanisms for Analytics where offered. Essential session cookies for login and security may still be required to use the portal. For more detail on Google’s practices, see Google’s Privacy Policy and Google’s documentation for Analytics.

8. Retention

We retain information for as long as needed to provide Services, maintain security evidence and audit history, meet contractual/legal obligations, resolve disputes, and enforce agreements. Retention periods vary by record type (accounts, invoices, assessment evidence, logs).

9. Security

We apply administrative, technical, and physical safeguards appropriate to a cybersecurity service provider, including access controls, session protections, and monitoring. No method of transmission or storage is 100% secure; please use strong unique passwords and MFA where offered.

10. Your choices

• Update account profile and security settings in the client portal where available.
• Request access, correction, or deletion of personal information, subject to legal and security retention needs.
• Opt out of non-essential marketing emails by replying or contacting us.
• Limit Google Analytics via browser settings, script/cookie blockers, or Google’s Analytics opt-out options where available.
• Close a portal account by contacting support (active engagements may require an offboarding process).

11. Children

The Services are intended for businesses and authorized adult representatives, not for children under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect children’s personal information.

12. International visitors

We primarily serve U.S. small businesses. If you access the Services from outside the United States, you understand information may be processed in the U.S. and other locations where we or our providers operate.

13. Changes

We may update this Privacy Policy from time to time. The effective date above will change when material updates occur. Continued use of the Services after an update means you acknowledge the revised policy.

14. Contact

Privacy requests: [email protected]
Phone: (618) 936-8308
Web: diamondguards.com
Operator: Diamond Bright LLC