Legal

Privacy Policy

Last updated: January 2026

Circle Systems, Inc. ("Circle Security," "we," "us," or "our") respects your privacy and is committed to protecting it through the practices described in this Privacy Policy. Circle Security does not sell your personal information.

This Privacy Policy describes how we collect, use, maintain, protect, and disclose the personal information we collect from you or that you provide when you visit our website at circlesecurity.ai or contact us by email, phone, social media, or any other method. Individuals located in the European Union ("EU") and the United Kingdom ("UK") should also see the Jurisdiction Specific Terms section below.

Who We Are

Circle Systems, Inc.

7055 Elverton Drive

Oakland, CA 94611

United States

Information We Collect

We only collect personal information that you choose to give us through one of two forms on our website:

  • Contact form: your name, email address, and business name.
  • Blog subscription: your email address.

We do not collect any other personal information through our website.

Sensitive Personal Information

We do not ask for sensitive personal information ("SPI"), such as Social Security numbers, financial information, driver's license numbers, precise geolocation, or racial and ethnic origin. If you choose to include SPI in a message to us, we will use it only to respond to you.

How We Collect Your Information

We collect personal information only when you submit our contact form or subscribe to our blog.

How We Use Your Information

We use the information you submit through our contact form to respond to your inquiry and follow up with you. We use the email address you provide when subscribing to our blog only to send you new blog posts.

Your California Privacy Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act of 2018 ("CCPA"), as amended and expanded by the California Privacy Rights Act of 2020 ("CPRA"):

  • Right to Know. Upon verification of your identity, you may request any or all of the following information about personal information we have collected and disclosed in the last 12 months:
    • The specific personal information we have collected about you
    • The categories of personal information we have collected about you
    • The categories of sources of that personal information
    • The categories of personal information we have disclosed to third parties for a business purpose, and the categories of recipients
    • The categories of personal information we have sold or shared, and the categories of third parties it was sold or shared with
    • The business or commercial purposes for collecting, selling, or sharing the personal information
  • Right to Delete. You may request that we delete personal information we have collected or maintain about you.
  • Right to Opt Out of Sale or Sharing. You may opt out of the sale or sharing of your personal information. We do not sell or share personal information.
  • Right to Opt In for Minors. Consumers under the age of 16 must opt in before their personal information is sold. We do not sell the personal information of minors.
  • Right to Correct. You may request that we correct inaccurate personal information, taking into account the nature and purposes of the processing.
  • Right to Limit Use of Sensitive Personal Information. You may request that we limit the use and disclosure of your SPI to what is necessary to provide the services or goods reasonably expected by an average consumer.
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
  • Authorized Agent. You may designate an authorized agent to make a request on your behalf by providing us with a copy of a power of attorney or written authorization granting that right.
  • Financial Incentives. We do not offer any financial incentives tied to the collection, sale, or deletion of your personal information.

Please note that if exercising these rights limits our ability to process your personal information (for example, a deletion request), we may no longer be able to provide our products and services or engage with you in the same way.

How to Exercise Your California Rights

To exercise any of the rights above, contact us at GDPRDPO@circlesecurity.ai or call our toll-free number, 1-888-899-0452.

We will need to verify your identity before processing your request. To do this, we will generally ask for enough information to match you with the information we hold about you. If we need additional information to identify you, we will let you know.

We may decline a request to know, delete, or correct personal information where we cannot verify your identity or locate your information in our systems, or as otherwise permitted by law.

If an authorized agent submits a request on your behalf, no information will be disclosed until the agent's authority has been reviewed and verified. We may ask for additional information, such as your written authorization, to confirm it.

Minors Under Age 16

Our website and services are intended for business use and are not directed to minors. We do not knowingly collect personal information from anyone under the age of 16, and we do not sell the personal information of California consumers.

Retention of Personal Information

Circle Security retains personal information only as long as necessary for the purposes described in this Privacy Policy, as set out in our retention schedule.

Disclosures and Sharing

Circle Security does not sell or share personal information, including the personal information of consumers under 16 years of age.

We may disclose your personal information:

  • To service providers and other organizations that support our business, such as the providers listed below. We contractually require these parties to keep personal information confidential and use it only for the purposes we have contracted them for.
  • To comply with a court order, law, or legal process, including responding to a government or regulatory request.
  • To enforce or apply our terms of use and other agreements.
  • To protect the rights, property, or safety of our business, our employees, our customers, or others. This includes exchanging information with other companies and organizations for cybersecurity, fraud protection, and credit risk reduction.

Service Providers

We use the following service providers to build, host, and operate our website:

  • Base44: website building and hosting
  • Webflow: website building and hosting

Data Security

The security of your personal information is very important to us. We use physical, electronic, and administrative safeguards designed to protect it.

However, no transmission of information over the internet is completely secure, and we cannot guarantee the security of personal information transmitted to our website. Any transmission of personal information is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures on the website.

SSL/TLS encryption. This website uses SSL/TLS encryption to protect information in transit, such as the inquiries you send us. You can recognize an encrypted connection when your browser's address bar shows "https://" and a lock icon. Encryption helps protect the information you send us from being read by third parties while it is in transit.

Contact Form

If you submit our contact form, we collect your name, email address, and business name to respond to your inquiry and any follow-up questions. We do not share this information without your permission, except with the service providers that operate our website.

We retain the information you submit through the contact form until you ask us to delete it, withdraw your consent to its storage, or it is no longer needed for its purpose (for example, after we have answered your request). Mandatory statutory provisions, including required retention periods, are not affected.

Blog Subscription

To subscribe to our blog, you need to provide a valid email address. We do not collect any other information. We use your email address only to send you new blog posts and do not pass it on to third parties, other than the service providers that help us send them.

We keep your email address until you unsubscribe, at which point it will be deleted.

Jurisdiction Specific Terms: European Union and United Kingdom

Role under the GDPR. "GDPR" means the General Data Protection Regulation (EU) 2016/679 ("EU GDPR") and, for individuals in the UK, the EU GDPR as retained in UK law ("UK GDPR"). Circle Security is the controller of the personal information processed in connection with this website, because we use it for our own purposes as described in this Privacy Policy.

Personal data. For users in the EU or UK, references to "personal information" in this Privacy Policy include "personal data" as defined in the EU GDPR and UK GDPR. Personal data is information about an individual who is directly identified, or can be identified, from that information.

Legal bases for processing. The EU GDPR and UK GDPR require us to have a legal basis for each purpose for which we use your personal information. Our legal bases are:

  • Where processing is necessary for our legitimate interests and your interests and fundamental rights do not override them ("Legitimate Interests").
  • Where we need to comply with a legal or regulatory obligation ("Compliance with Law").
  • Where we have your specific consent for the processing in question ("Consent").

Purpose: Legal basis

  • Responding to contact form inquiries: Legitimate Interests
  • Sending blog posts to subscribers: Consent
  • Security: Legitimate Interests
  • Compliance with law and cooperation with authorities: Compliance with Law
  • Protection and enforcement of rights: Legitimate Interests
  • Further uses: The original legal basis, if the further use is compatible with the purpose for which the personal information was collected

International transfers. We may share your personal information with third parties located outside the EU, the European Economic Area ("EEA"), or the UK. Whenever we transfer your personal information outside these regions, we ensure a similar level of protection by implementing at least one transfer mechanism recognized under the EU GDPR and UK GDPR, such as the European Commission's Standard Contractual Clauses (EU) or an International Data Transfer Agreement (UK).

Your Rights (EU and UK)

If you are in the EU or the UK, you have the following rights regarding how we collect, use, and disclose your personal information as a controller:

  • Right of Access. You may request access to the personal information we hold about you.
  • Right to Rectification. You may request that we correct inaccurate personal information and, taking into account the purpose of processing, complete incomplete information.
  • Right to Erasure ("Right to be Forgotten"). You may request that we delete your personal information in certain circumstances.
  • Right to Restrict Processing. You may request that we restrict processing of your personal information.
  • Right to Data Portability. You may request that we transfer your personal information to another organization, where technically possible.
  • Right to Object. You may object to the processing of your personal information, including for direct marketing.
  • Right Not to be Subject to Automated Decision-Making. You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you.

To exercise any of these rights or to complain about how we handle your personal data, contact us at GDPRDPO@circlesecurity.ai or 1-888-899-0452.

Retention (EU and UK)

We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes of processing and whether we can achieve them by other means, and applicable legal requirements. Our retention periods are documented in our retention schedule.

Complaints

If you would like to complain about our use of your personal information or our response to your requests, you may contact us or submit a complaint to the data protection regulator in your jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date at the top.

Contact Us

If you have questions about this Privacy Policy, contact us at contact@circlesecurity.ai