Skip to main content

Cimon Privacy

At Cycode, we take our users' privacy seriously. As a result, Cimon collects and uses only the information that is required to deliver you a great and secure experience and to continue and improve it, and data that is no longer necessary is deleted.

Here are the main things you should know about the data Cimon collects.

Data NOT collected by Cimon​

We never forget to balance our goal of improving Cimon with the help of additional data with our users' privacy rights and security needs. As a security tool- protecting data is what we're all about!

So, the following data never leaves your environment and is not shared with anyone, including Cimon:

  • Source Code

Data that Cimon collects

Our tool collects the following types of data to provide its service and to improve and protect user experience:

  • Cimon version
    • This helps us understand which version of our tool you are using, which is essential for troubleshooting and improving our product.
  • Metadata about the CI runner environment:
    • This includes information about the environment in which Cimon is running, such as the operating system and system architecture, which helps us ensure compatibility and optimize our tool's performance.
    • E.g., OS version, architecture (amd64/arm), GitHub runner version.
  • Configuration used:
    • This includes information about the configuration options you have given, such as the rules you have chosen to enforce.
    • E.g., allowed IPs, allowed domains, prevention mode.
  • Metadata about the project analyzed by Cimon:
    • This includes information about the project that you are analyzing using Cimon, such as the repository name, organization name, and workflow name. This information is used to help you monitor Cimon installations in the platform.
    • E.g., organization name, repository name, workflow name.
  • Error logs:
    • If Cimon encounters issues, Cimon error logs will be sent for further analysis.

Use of collected data

We use the data that Cimon collects for the following main purposes:

  • Maintain, support, secure and continue to improve Cimon and our service: We analyze aggregated and de-identified data (which, for the avoidance of doubt does not include personal information) collected by our tool to identify trends and patterns that help us support, secure and improve Cimon so it provide better service to you.

Data sharing​

We use the services of certain third-party services to provide, maintain, support, and protect Cimon, including, for instance, cloud hosting, database and log management, support, and usage and performance analytics. All such third-party services are authorized to handle data solely for the purpose of fulfilling their assigned responsibilities and are obligated not to use or disclose it for any other purpose.

We do not sell your data, period. We also do not share it with third parties other than in accordance with and as described in this documentation page and our Privacy Policy.

An up-to-date list of our sub-processors can be shared upon request.

Our full Privacy Policy is just a click away​

For more information about how we collect, use, and protect your data, as well as your rights and choices regarding your data, go to our Privacy Policy here.