Last updated: August 2026
SunuCyberSecurity is a division of SunuTechnology, based in Dakar, Senegal. We're a cybersecurity company — protecting data isn't just a legal formality for us, it's what we do. Here's how we handle yours.
Depending on how you use SunuCyberSecurity, we may collect: your contact details (name, email, company, industry), your account information (credentials, preferences), the results of the security scans you run on your own infrastructure, a few technical details tied to your connection (IP address, browser, device) used only for security and to keep the service running properly, and the content of your exchanges with our support team.
Most of it comes directly from you: when you create your account, run a scan, or contact us. Some is generated automatically as you use the platform. The rest comes through our technical service providers, described in the next section.
First, to run the platform: executing your scans, generating your reports, managing your account and subscription, and giving you responsive support. It also helps us keep the service secure: spotting fraudulent or malicious use, protecting accounts, and meeting our legal obligations when they apply. What it's never used for: advertising or targeted marketing. That's simply not our model.
Everything you send us is encrypted in transit and at rest (TLS 1.3). Our servers are hosted in Germany, under enterprise-grade protection — we hold our own systems to the same standard we recommend to our clients.
We never sell your data. It's only shared with the providers strictly necessary to run the service: Resend for our transactional emails, and depending on the payment method you choose, PayPal, Kkiapay, or Orange Money to process your payments — each governed by its own privacy policy. We may also share data if required by law, or to protect our rights and our users' rights against genuine malicious use.
SunuTechnology is based in Dakar, Senegal, but our servers are hosted in Germany, within the European Union. Your data may therefore travel between Senegal and Europe. We chose this hosting specifically for its level of security and data protection.
Account data is kept for as long as your account stays active. Scan results follow your plan: 30 days on Free, 90 days on SunuEssential, unlimited on SunuAdvanced and SunuElite.
SunuCyberSecurity isn't intended for minors. We don't knowingly collect data from anyone under the legal age in their country of residence. If you believe a minor has shared data with us, write to privacy@sunucybersecurity.com and we'll delete it.
We keep it simple: only the cookies strictly necessary to run the platform (login, session) are used. No advertising cookies, no third-party trackers.
You stay in control of your data: the right to access, correct, delete, and port it — in line with Senegalese data protection law, applicable BCEAO/COBAC regulations, and the European GDPR for users it covers. You can also object to a specific use of your data or withdraw consent you previously gave. One email to privacy@sunucybersecurity.com is all it takes.
Not happy with how we're handling your data? Contact us first — we'd rather sort it out directly. You also have the right to file a complaint with Senegal's Commission de Protection des Données Personnelles (CDP), the competent authority on the matter.
Got a question about your data? Reach our data protection officer directly at privacy@sunucybersecurity.com.