Solutions overview
For security teams
For fraud / Risk teams
For digital business teams
Account take over (ATO)
Credit card data theft
SEO poisoning
Library
Partnerships
About
News
Events
Careers
ContactPrivacy Policy
Memcyco Ltd. (“Memcyco”) is committed to protecting your privacy. This privacy policy describes how Memcyco collects and uses the personal information collected when visit our Website at www.memcyco.com (the “Website”) and the software-as-a-service (SAAS) applications and related services which are hosted and operated by Memcyco and provided to its customers. It also describes the choices available to you regarding our use of your personal information and how you can exercise your privacy rights regarding this information.
Personal Information Collection, Use, and Sharing
When you register with the Website or use the services made available to the public on the Website, personal information is needed such as your name, company name, and email address. Memcyco uses and shares personal information for purposes such as processing and fulfilling your request, billing, service improvement, research, marketing, communicating with you and other general purposes. Regarding use of Memcyco SAAS solutions purchased by our customers, see the section below entitled Data Collected Through Memcyco Purchased Solutions.
Memcyco will not sell, rent, exchange, or share personal information with any third parties without permission or except as described in this privacy policy. Memcyco will share personal information with government authorities and others in order to respond to investigations, court orders, legal process, or to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety, online identity or digital assets of any person, violations of Memcyco’s terms of service, or as otherwise required by law. If Memcyco is involved in a merger, acquisition, or sale of all or substantially all of its assets, you will be notified via email and/or a prominent notice on our Website of any such change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
Memcyco may also anonymize and aggregate data collected and use and disclose it for general purposes.
Data Security
The security of your personal information is important to us. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and when we store and process it in our data center. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security and do not take responsibility for any third-party actions when we have endeavored to follow generally accepted standards. In addition, we do not take responsibility for your systems, the Internet itself or any third-party networks or services used to transmit data which are outside the firewall of the data center we use to process and store your personal data. If you have any questions about the security on our Website or our services, please contact us.
Email Marketing Choices
You may choose to stop receiving our marketing emails by following the unsubscribe instructions included in these emails or you can contact us. If you purchase a service, you can still opt out of marketing related emails however you cannot opt out of service-related announcements.
If your personal information changes, you may correct, update, amend, delete/remove or deactivate it by contacting us by email or postal mail at the contact information listed below. We will respond to your request within 30 days. Note that different rules apply to personal information processed or stored in our purchased solutions. (See section below entitled Data Collected Through Memcyco Purchased Solutions).
Data Storage
We will retain your personal information for as long as your account is active or as needed to provide you with services and for archival and marketing purposes. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Note that different rules apply to personal information stored in our purchased solutions. (See section below entitled Data Collected Through Memcyco Purchased Solutions).
Cookies and Similar Technologies
Memcyco uses a technology called “cookies” and technologies similar to cookies to store session information and other information to provide services and to gauge interest and usage of the services that we offer and provide. The use of cookies and technologies similar to cookies by our partners and affiliates and customers is not covered by our privacy policy.
Cookies
A cookie is a small amount of data, which often includes an anonymous unique identifier, which is sent to your browser from a website’s computers and stored on your computer’s hard drive. We use both session ID cookies and persistent cookies. A session ID cookie expires when you close your browser. We use session cookies to track your Login status. This cookie is only ever transmitted over HTTPS. A persistent cookie remains on your hard drive for an extended period of time. We use persistent cookies to determine from where you were referred to our site, as well as the last user ID that you used to login to our site. Memcyco may set and access Memcyco cookies on your computer. Cookies are required to use certain services provided on the Website. You can remove persistent cookies by following directions provided in your Internet browser’s “help” directory. If you reject cookies, you may still use our Website, but your ability to use some areas of our site will be limited.
Technologies Similar to Cookies
By “technologies similar to cookies” we mean any type of data storage and recovery mechanism used on a user’s device for purposes of obtaining information and/or providing services. The most common ones include:
- Browser local storage. Certain websites use local storage called “sessionStorage” and “localStorage”, as well as the indexed database from the Internet browser to store information.
- Local storage of browser plug-ins, namely Flash local storage (“Flash Local Shared Objects”) or Silverlight local storage (“Isolated Objects”).
- Web beacons, a tracking technique, which consists of inserting into a website (or an e-mail) an image hosted on an Internet server, in a way that when a browser or an e-mail application connects to the server to download and view the image, this connection is registered. This allows us to know when a user viewed a web page or the e-mail. Sometimes this image is very small or transparent, preventing the user from being aware of its existence.
- “Fingerprinting”, a technique which combines information obtained from the user’s browser and navigation equipment to set a user, browser and the device(s) used apart in their subsequent visits to a website or different websites.
Log Files
As is true of most websites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, device characteristics and clickstream data.
We use this information to provide services, to analyze trends, to administer the site, to track users’ movements around the site and to gather demographic information about our user base as a whole. We also gather, parse, and retain data related to the provision of our Website and related services for internal and service-related purposes.
We do link such automatically collected data to personally identifiable information to provide services to our customers, to better gauge our customers’ needs and to provide specific information to best serve them.
Third Party Advertising
We may partner with a third-party ad network to manage our advertising on other sites. Our ad network partner would use cookies and web beacons to collect non-personally identifiable information about your activities on this and other websites to provide you targeted advertising based upon your interests. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt-out by contacting us. We may use Google AdSense to publish ads on this site. When you view or click on an ad, a cookie will be set to help better provide advertisements that may be of interest to you on this and other websites. You may opt-out of the use of this cookie by visiting Google’s Advertising and Privacy page: www.google.com/privacy_ads.html.
Blogs and Community Forums
Our website may offer publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. We may display personal testimonials of satisfied customers on our site in addition to other endorsements. With your consent we may post your testimonial along with your name. If you wish to update or delete your testimonial, please contact us.
Social Media Features
Our website may include social media features, such as the Facebook ‘Like’ button, and widgets, such as the ‘Share This’ button or interactive mini programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Website. Your interactions with these features are governed by the privacy policy of the company providing it.
Other Websites
Our Website includes links to other websites whose privacy practices may differ from those of Memcyco. If you submit personal information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.
Updates to the Privacy Policy
Memcyco may update this Privacy Policy and we may notify registered users of significant changes in the way we treat any personal information by sending a notice to the primary email address specified in your Memcyco account or by placing a notice on our Website or within our solutions. However, we nevertheless reserve the right to amend our privacy practices and policy from time to time without prior notice. We encourage you to periodically review this page for the latest information on our privacy practices.
Data Collected Through Memcyco Purchased Solutions
Memcyco is in the business of providing SAAS solutions and associated services. In connection with providing such offerings to its customers, Memcyco collects information (including personal information) under the direction of its customers about people who access our customers’ websites and people who receive emails and text messages from our customers (“Customer Data”). Memcyco has no direct relationship with the individuals whose personal data it processes and stores for Memcyco customers, and Memcyco will process, store and retain Customer Data as per our agreement with our applicable customer (including transferring the Customer Data to the applicable customer). Therefore, if you are a user of one of our customer’s websites or a recipient of emails or text messages from one of our customers and would no longer like to be involved with one of our customers that use our solutions or otherwise have issues related to your data that is included in Customer Data (such as to correct, amend, or delete such data), please contact the customer that you interact with directly. For the purposes of GDPR and other global privacy laws, Memcyco acts as a processor/instruction taker which accesses and processes Customer Data on behalf of its customers, which are the controllers/owners of such data.
PoSA for Websites.
Memcyco provides its customers with a software-as-service (SAAS) that tracks security related user activities on the customer’s website, provides associated alerts and enables the customer website to show a watermark with a unique code for each user who visits that website so that user can be assured that he or she is viewing the authentic website (and not a counterfeit website).
To achieve this functionality, the following data is gathered, stored and processed by Memcyco using cookies and technologies similar to cookies for the purpose of delivering the functionality of its SAAS product:
- The user ID that the user enters to log-in to the customer website (or an automatically assigned user ID if the customer website does not require log in or registration).
- Information which identifies the browser and device that is being used to access the customer website (e.g., IP address, hardware characteristics, operating system, browser type).
- The location range reflected by the IP address of the computer that is being used to access the customer website.
- The time when such computer is being used to access the customer website.
Memcyco may share such information with government authorities and/or the applicable Memcyco customer in order to respond to investigations, court orders, legal process, or to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety, online identity or digital assets of any person, violations of Memcyco’s terms of service, or as otherwise required by law. Memcyco may also anonymize such data to process, use and disclose it for general purposes.
PoSA for Email and Text Messaging.
Memcyco provides its customers with a SAAS product which populates each email or text message in a batch of messages designated by our customer (prior to sending) with a watermark with a unique code for each recipient so the recipient can be assured that the email or text message received is from the legitimate source (and not an impersonating source). Memcyco PoSA for Email and Text Messaging does not send out emails or text messages to the customer’s recipients.
To achieve this functionality, the following data is gathered, stored and processed by Memcyco using cookies and technologies similar to cookies solely for the purpose of delivering the functionality of its SAAS product:
- The user ID that the recipient has previously entered in the registration framework that the customer uses to register that recipient for this PoSA watermark verification system.
- The watermark and recipient code that is inserted into the message for each recipient.
Service Providers and Sub-Processors
Memcyco may transfer personal information to companies that help us provide our services. Transfers to subsequent third parties are covered by the provisions in this Policy regarding notice and choice and the service agreements with our customers.
Data Retention
Memcyco will retain personal information from our Website and that we process on behalf of our customers for as long as needed to provide services to our customers and to carry out the permitted uses under this Privacy Policy. Memcyco will also retain and use this personal information as necessary to comply with our legal and contractual obligations, resolve disputes, and enforce our agreements.
Children’s Privacy
Memcyco’s Website does not knowingly collect, maintain, or use personal information from children under 13 years of age except as necessary to operate our SAAS products, and no part of our Website is directed to children under the age of 13. If you learn that your child has provided us with personal information without your consent, you may alert us at Privacy@Memcyco.com. We will take steps to delete it if we learn we have collected it.
Locations where personal information is processed
Your personal data may be stored and processed in the United States, the European Union, Canada, Israel, and in any other country where Memcyco or its affiliates, subsidiaries, or third-party service providers maintain facilities or personnel. When you provide personal data to Memcyco, we may process and transfer your data within such countries and around the world in connection with providing services to our customers and their users. We follow applicable data protection laws when transferring personal data.
Memcyco may transfer, store, or process your personal data in a country outside your jurisdiction, including ones that are not subject to an adequacy decision by the European Commission. However, we have taken appropriate safeguards to require that your personal data will remain protected in accordance with this Privacy Statement. These safeguards include implementing the European Commission’s Standard Contractual Clauses for transfers of personal data between our corporate group companies if and when we establish additional companies as part of our corporate group, thus requiring all group companies to protect personal data they process from the EEA in accordance with European Union data protection law.
To the extent permitted by law, by choosing to visit our Website or otherwise providing information to us, you are agreeing to the processing and transfer of your personal information in accordance with this Privacy Policy.
Exercising your rights relating to your personal information
To exercise your rights with regard to personal information collected and stored by Memcyco in connection with your use of the services made available to the public by Memcyco on the Website, Memcyco is the “controller” with regard to the processing of your personal information and you should contact us directly in connection with the exercise of your rights under applicable privacy laws. We try to respond to all legitimate requests within one month and will contact you if we need additional information from you to honor your request. Occasionally it may take us longer than a month, considering the complexity and number of requests we receive.
To exercise your rights regarding personal information collected and stored by Memcyco in connection with the use of Memcyco SAAS solutions purchased by one of our customers, please inquire with the applicable customer directly. Since Memcyco serves as a “processor” and such customer is the “controller,” Memcyco may only make changes to a customer’s data upon instruction from that customer unless otherwise required by applicable law. If you make your request directly to us, please provide to us the name of the Memcyco customer who is the controller for your personal data, and we will refer your request to that customer.
Description of your rights relating to your personal information
You have certain rights relating to your personal information under the local data protection laws that apply to you. Depending on the applicable laws and, in particular, if you are located in the European Economic Area, California or Nevada or otherwise covered under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act of 2018 (CCPA) or the Nevada Security and Privacy of Personal Information statute these rights may include the following, to the extent mandated by, and subject to the requirements and limitations of, those laws:
- To access your personal information held by us (right to access).
- To rectify inaccurate personal information and, considering the purpose of processing the personal information, ensure it is complete (right to rectification).
- To erase/delete your personal information, to the extent permitted by applicable data protection laws (right to erasure; right to be forgotten).
- To restrict our processing of your personal information, to the extent permitted by law (right to restriction of processing).
- To transfer your personal information to another controller, to the extent possible (right to data portability).
- To object to any processing of your personal information carried out based on legitimate interests (right to object). Where we process your personal information for direct marketing purposes or share it with third parties for their own direct marketing purposes, you can exercise your right to object at any time to such processing without having to provide any specific reason for such objection.
- To the extent we base the collection, processing and sharing of your personal information on your consent, to withdraw your consent at any time, without affecting the lawfulness of the processing based on such consent before its withdrawal.
- Receive a copy of your personal data in an electronic and machine-readable format
- Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects or otherwise significantly affects you (“Automated Decision-Making”). Memcyco does not perform Automated Decision-Making as part of the processing activities covered by this Privacy Statement.
- Receive the categories of sources from whom we collected your personal data.
- Opt out of marketing communications at any time by clicking on the “Unsubscribe” or “opt out” link in marketing emails we send you or by contacting us
- Complain to a regulator or data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.
Memcyco will not discriminate against you for exercising your rights.
If your personal data has been submitted to us by or on behalf of a Memcyco customer and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable customer directly.
If you are a resident of California, under the age of 18 and have registered for an account with us, you may ask us to remove content or information that you have posted to our Websites. Please note that your request does not ensure complete or comprehensive removal of the content or information, because, for example, some of your content may have been reposted by another visitor to our Websites.
Legal basis for processing personal information
Our legal grounds for collecting and using your personal information as described in this Privacy Statement fall into the following four categories.
Consent: In some cases, we ask you for your consent to process your personal information, such as when we need your consent for marketing purposes. You can withdraw your consent at any time, which will not affect the lawfulness of the processing before your consent was withdrawn. If you would like to withdraw your consent, you can do so by emailing privacy@memcyco.com.
Legitimate Interest: We process certain data for the legitimate interests of Memcyco, our affiliates, our partners, or our customers. These legitimate interests include, for example, contacting you to provide support or sending you marketing information (subject to applicable law); detecting, preventing, and investigating illegal activities and potential security issues; and maintaining and improving the Website and mobile applications. We will rely on our legitimate interests for processing personal information only after balancing our interests and rights against the impact of the processing on individuals.
Performance of a Contract: Sometimes we process personal information to perform our obligations under an agreement with you or your employer or prospective employer.
Other Legal Bases: In some cases, we may have a legal obligation to process your personal information, such as in response to a court or regulator order. We also may need to process your personal information to protect vital interests, or to exercise, establish, or defend legal claims.
Contact Us
For questions related to this Privacy Policy, contact Privacy@Memcyco.com or at:
Memcyco Ltd.
C/O: Security Department
21 Bar Kochva Street, 10th Floor
Bnei Brak 5126001 Israel
Effective date: February 2023
