Lion8 Privacy Policy

Customer data. When a customer organization connects its services to Lion8, the information Lion8 reads from those services is processed on behalf of that customer, who is the controller of it. We act as its processor and use it only to provide Lion8 to that customer.

Account data. For the details of people who use Lion8 (for example, sign-in and activity in the product) we are the controller.

Lion8 account data: name, work email, organization, role, sign-in method (email, Google or Microsoft sign-in), sign-in times, and actions taken in Lion8 (for example, dismissing a finding or opening a ticket).

Data from connected services: depending on the services a customer connects, their security configuration and settings; directory information about the customer's users in those services, such as name, email, role, group or license, sign-in method, last sign-in time and multi-factor status; and the activity records, audit logs and security findings the service makes available through its interfaces.

Support and communications: content of support tickets, comments and messages you send us, and contact details used for the security notifications a customer configures.

Technical data: log data needed to operate and secure the service, such as request times, IP address and browser type. Lion8 uses cookies and local storage that are needed for sign-in and for the product to work.

To provide Lion8: evaluate the connected services against security best practice, show findings, users and recommendations, and send the notifications a customer configures.

To secure and operate the service, prevent misuse, and troubleshoot.

To provide support and communicate with customers about the service.

To comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use data from connected services for advertising.

When a user asks Lion8 to explain a finding, the finding's text (the check, its result, and the remediation) may be sent to an AI model through our hosting platform to generate the explanation. Access tokens and raw data from connected services are not sent.

We share information only with service providers that help us run Lion8, under agreements that require them to protect it, and only as needed:

Base44 — application hosting, database and functions.

Amazon Web Services — YouCC's own cloud environment, where Lion8's scanning services run (Amazon ECS and AWS Lambda).

We may also disclose information when required by law, or to protect the rights, property or safety of our customers, users or YouCC.

Our service providers may process information outside Israel. Where required, we rely on appropriate safeguards for such transfers.

YouCC operates an information security management system certified to ISO/IEC 27001:2022. Lion8 encrypts data in transit (TLS 1.2 or higher) and restricts every customer's data to that customer's organization.

Data from a connected service is kept while the integration is active. When a customer removes the integration in Lion8, or removes Lion8's access in the service itself, the access tokens are deleted and the data read from that service is deleted.

Account data is kept for as long as the customer's Lion8 subscription is active, and deleted after termination, unless we must keep it longer by law.

Subject to applicable law — including the Israeli Protection of Privacy Law, 5741-1981, and, where it applies, the EU/UK GDPR — you may request to access the personal information we hold about you, to correct it, or to have it deleted, and you may object to or ask us to restrict certain processing. Where we process data on behalf of a customer (section 1), we will forward your request to that customer and assist it in responding.

To make a request, email mssp@youcc.net. We will respond within the time required by law. You may also complain to the Israeli Privacy Protection Authority or your local data protection authority.

Lion8 is a business service and is not intended for anyone under 18.

We may update this policy. We will post the new version on this page with a new date and, for material changes, notify customers.

YouCC Technologies Ltd., 14 Imbar St., Petach Tikva, Israel · mssp@youcc.net · +972-50-772-8727