Privacy Policy

Last updated: August 2025

This Privacy Notice provides you with information about what personal data we collect about you, how and why we use it, with whom we share it, how we store it, and your rights with respect to your data. This Privacy Notice is meant to be read together with our Terms of Service, which you can find at https://native.security/terms-of-service.

We at Rocksteady Cloud Ltd. and RockSteady Cloud INC. dba Native ("us", "we", or "our") located at Menachem Begin 156, Tel Aviv recognize and respect the importance of maintaining the privacy of our customers (the "Customers") and their personnel, as well as to the visitors of our site. This Privacy Notice describes the types of information we collect from you when you visit our site and/or platform and/or use our services thereon (such services, together with the site and/or platform, the "services").

"You" means an individual using the services, and "personal data" means any information that refers, is related to, or is associated with an identified or identifiable individual or as otherwise may be defined by applicable law. This Privacy Notice details which personal data we collect when we provide the Services to you. We are database controllers of the data collected on our website and processors of the data of our Customers' personnel.

Please note that if you are a person accessing the platform on behalf of a Customer, such Customer will have access to your personal data.

You have no legal obligation to provide us with any personal data. If you are subject to the laws of the State of Israel, note that any personal data you choose to provide is provided with your consent as required under applicable law. Note that if you do not provide us with certain personal data, we may not be able to provide you with some or all of the associated services.

Personal Data We Collect

Communications. When you send us a message through the contact form on our site and/or platform or other means, request information from us, sign up for our email list, complete online forms, or contact us for any other reason we collect any data you provide, such as your name, company, email, and the content of your message.
Cloud Environment Configuration. During the onboarding process, Customers are asked to authorize access to specific cloud APIs. We collect metadata, configurations, and settings from the Customer's cloud environment as expressly permitted by the Customer. We do not collect or access the actual data stored within the Customer's cloud infrastructure. If a Customer request our support, we may have access to additional portions of their systems, in accordance with their requests and requirements.
User and Access Metadata. We may analyze metadata within the Customer's environment, including user roles, access permissions, associated email addresses, and ownership tags. This includes identifying stakeholders and analyzing how accounts are configured and used within the Customer's organization.
Activity and System Data (including Cookies). In addition, when you use the site and/or platform, we may gather certain information automatically about your computer or mobile device, such as your operating system, your IP address, device ID, as well as your browsing history and any other information regarding your use, viewing, and purchase history on our site and/or platform. This data is also collected via cookies (for more information, see cookies section below).
Analytics Tools (including FullStory). We use third-party analytics tools, including FullStory, to help us understand how users interact with our site and platform. FullStory provides session replay technology that captures user interactions such as clicks, scrolls, mouse movements, and navigation through our site and/or platform. This helps us identify usability issues, improve user experience, and optimize the performance of our services. We do not use FullStory to record sensitive personal information (e.g., passwords or payment details). FullStory privacy policy: https://www.fullstory.com. Opt out: https://www.fullstory.com/optout.
Geo Location. We may process your (device) geo-location, subject to your consent as may be required by applicable law.
Visitors to Our Social Media Pages. When you engage with our social media outlets, we collect the personal data you provide and may receive aggregate analytics from the platform providers.

How We Use Your Personal Data

General. We and any of our trusted third-party subcontractors and service providers use the personal data we collect from and about you for purposes including: providing services (including tailored recommendations), responding to inquiries, developing new products/services, sending newsletters and promotional materials, reviewing usage and operations, using data in aggregate form, preventing fraud and protecting security, providing support, improving recruiting, business management and retention efforts, and responding to social media engagement.
AI. We use artificial intelligence tools to enhance the functionality and effectiveness of our services. We do not train AI models on Customer data. We use only AI providers that guarantee data isolation and do not use customer data for model training or learning; and we maintain internal controls to ensure data is processed solely for the purposes described in this policy.
Statistical Information and Analytics. We and/or service providers collect and analyze usage information across platforms and users. For example, we may use de-identified/aggregate configuration information of Customer cloud environments for research and product improvement.

Sharing the Personal Data We Collect

Access-Holders. Categories include R&D and Product teams (subject to change).
Affiliates. For provision of products/services and business management.
Service Providers and Subcontractors. For authentication, data storage/management, application logs, usability, analytics, and direct marketing.
International Transfers. We may use subcontractors/service providers in other countries subject to non-disclosure and non-use obligations.
Business Transfers. Disclosure in merger, sale, acquisition, or liquidation scenarios.
Law Enforcement Related Disclosure. Where necessary to protect rights/safety, comply with legal obligations, or pursuant to lawful orders.
Legal Uses. As required or permitted by law.
Advertisers. With consent and limited identifiers; advertisers may combine with independently collected data.

Security

We follow generally accepted industry standards to protect personal data; however, no method is 100% secure. Please safeguard your own credentials and devices.

Your Rights

Subject to applicable law (including Israeli Privacy Protection Law, 1981), you may request access, correction, update, or deletion of your personal data by emailing support@native.security. If data belongs to a Customer, you may need to contact that Customer.

Data Retention

We retain personal data as necessary for the purposes set forth above and then delete it when no longer necessary, subject to longer retention where required by law or for record-keeping/litigation purposes.

Cookies and Similar Technologies

We use cookies and similar technologies on the platform and site for authentication, sessions, feature flags, analytics, announcements, personalization, and advertising. Third parties may place/read cookies or use web beacons in the course of advertising across websites.

What are Cookies?

Session cookies: temporary; remain until you leave the site/platform.
Persistent cookies: help save settings across visits; remain until deleted.
First-party / third-party cookies: we use both.
We may use "cookies" to refer broadly to similar technologies (e.g., web beacons, pixel tags).

How We Use Cookies

Categories generally include: Necessary, Functionality, Security, Performance/Analytics, Advertising. Cookies may also be placed in messages to track interaction.

How to Adjust Your Preferences

Most browsers accept cookies by default. You can refuse or delete cookies, but some features may not function properly. Device settings can limit or reset ad identifiers. Preference changes do not eliminate ads—only reduce relevance.

Third-Party Applications and Services

Use at your own risk and subject to third-party terms and privacy policies.

Communications

We may send service-related communications without opt-out (contact the applicable Customer if you do not wish to receive such communications).

Children

We do not knowingly collect personal data from children under 13. Please notify us if a minor has contacted/enrolled without permission.

Changes to the Privacy Notice

We may update this Privacy Notice periodically and will post updates on this page. For material changes, we will notify via the site/platform or email.