Last updated: 22 September 2026
Privacy Policy
This Privacy Policy describes how 8a Tech & Media Consulting DMCC (“we”, “us”), operator of the Eonycs brand, handles information in connection with the Eonycs private beta.
Data controller
The data controller is 8a Tech & Media Consulting DMCC, Jewellery & Gemplex 3, Level 1, Unit 68, DMCC Business Centre, Dubai, United Arab Emirates (License DMCC-918133, TRN 104597801000001). Contact: contact@eonycs.com.
Information we process
During the private beta we process account and contact details you provide, target and scope configuration you record, and the findings, evidence, and telemetry produced by your authorized assessments.
How we use it
We use this information to operate the assessment service, to maintain the audit trail your runs depend on, to secure the platform, and to communicate with you about the pilot. We do not sell personal data.
Processing locations and sub-processors
Processing locations, infrastructure providers, and any model providers involved in analysis are documented in the pilot agreement. When you view saved step explanations in another language, Microsoft Azure Translator processes their text. This translation flow does not send uploaded source files or code excerpts. Translations are cached privately with the report and erased when the report is deleted; original explanations remain available. Translation does not consume pentest credits. Bring-your-own-key operation with supported LLM providers is planned for the private beta.
Eonycs AI conversations
When you send a message, Eonycs processes the prompt, limited conversation history and any page context you choose through Anthropic's Claude API to provide the answer. Conversations are automatically stored privately for your account and organization scope in our Supabase database, not shared as an organization-wide chat library. You can delete them from History. We limit history to 30 conversations per user, 60 messages each; text expires 90 days after its last save and is removed by scheduled cleanup. Deletion does not erase separate usage/accounting receipts, required legal records or immediately remove backups or copies retained by a processor under its own applicable terms. Anthropic's API retention and processing terms apply; we do not promise zero provider retention. Do not submit passwords, API keys or data you are not authorized to share. Contact contact@eonycs.com for data-rights requests.
Retention and your rights
Assessment data is retained for the duration agreed in the pilot agreement. You may request access, correction, or deletion of your personal data by contacting contact@eonycs.com.
Enterprise applications, contracts and signatures
We process company details, submitted verification documents, amendment reasons, payment references and electronic-signature records to review applications, administer contracts, prevent abuse and meet applicable obligations. Signature records include the signer's stated name and role, signature representation, consent, exact document version, timestamps and available request IP/browser information. IP information is request evidence, not verified physical location. These records are restricted to authorized personnel and relevant organization representatives, not published. Retention depends on the record's purpose, applicable law and legal holds; a universal three-year retention period is not assumed. Contact us to exercise your rights or arrange data retrieval before account closure.
8a Tech & Media Consulting DMCC
Jewellery & Gemplex 3, Level 1, Unit 68
DMCC Business Centre
Dubai, United Arab Emirates
License DMCC-918133 · TRN 104597801000001