ANTIV — Privacy Policy
Effective date: October 25, 2026 Data controller: Reboot Computer Services Inc. ("Reboot," "we," "us," "our"), [mailing address]. Contact / privacy requests: [privacy@rebootcs.com] · [support@antiv.io]
This Privacy Policy explains what data the ANTIV security platform (the antiv.io portal, the ANTIV desktop/server agents, and related APIs — the "Service") collects, how we use it, and the choices you have.
Our commitment in one paragraph
We do not sell your personal data. We do not share it with third parties for their own marketing or purposes. We do not use advertising networks, analytics trackers, or data brokers. We use a small, named set of service providers strictly to operate the Service (for example, to take a payment). Data we collect is used to provide, secure, support, and improve the Service — and for nothing else.
1. Who this applies to
- Customers who hold an ANTIV account.
- Partners / MSPs who manage the Service for their own End Clients.
- End Clients and their devices managed by a Partner. For End Client data processed through a Partner, the Partner is the controller and Reboot acts as a processor on the Partner's instructions.
2. What we collect
Account & contact data: name, email, company, role, password (hashed), billing contact, support correspondence.
Billing data: subscription plan, transaction history, and the last four digits/brand of a card. Full card numbers are handled by Stripe and are never stored on our servers.
Device & telemetry data (from Agents): device name/hostname, operating system and version, IP address, hardware identifiers/fingerprint, installed software and definition versions, and health metrics (CPU, RAM, disk).
Security & scan data: scan results, detected threats, file names/paths and file hashes of flagged items, quarantine records, firewall/compliance/rootkit results (for managed servers), and related security events.
Usage & log data: login events, IP address, actions in the portal, and diagnostic logs used to operate and secure the Service.
We collect this to deliver a security product; much of it is necessary for the Service to function.
3. How we use data
- Provide, operate, and maintain the Service and its security functions.
- Detect, analyze, quarantine, and report threats.
- Authenticate users, secure accounts, and prevent abuse/fraud.
- Process subscriptions and payments.
- Provide support and send service/transactional communications.
- Improve the Service and definitions (using security data such as threat and hash information).
- Comply with legal obligations and enforce our Terms.
We do not use your data for advertising, and we do not sell it.
4. Legal bases (where GDPR/UK GDPR applies)
Performance of a contract (providing the Service), legitimate interests (securing and improving the Service, preventing fraud), legal obligation, and consent where required (e.g., certain optional features). [confirm with counsel]
5. Service providers (sub-processors)
We share data only with the limited providers below, only to the extent needed to run the Service, under contracts that require them to protect it and use it solely on our instructions. None of them receive your data for their own purposes, and we do not sell data to anyone.
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe | Payment processing | Billing contact, payment method (held by Stripe), transaction data. Required to take card payments. |
| VirusTotal (optional, admin-controlled — off unless enabled) | Threat enrichment — looking up reputation of detected-file hashes | File hashes and minimal threat metadata of flagged items only. No account or billing data. When not enabled, no scan data is sent to VirusTotal. [decision: keep optional, make opt-in, or disable entirely] |
| Hosting / infrastructure — [your hosting provider] | Running the servers that host the Service | Data at rest/in transit on our infrastructure, under contract. [name your host, or state "self-hosted on infrastructure we control"] |
| Email delivery — [self-hosted mail / provider name] | Sending transactional and security emails | Recipient email address and message content. [decision: confirm whether email is self-hosted or an external provider; name it if external] |
Our own related products (the Dissemino MSP marketplace, the ANTIV update server at update.rebootcs.com, and our hosted support chatbot at aibot.rebootcs.com) are operated by Reboot — they are not outside providers.
We will also disclose data if required by law (e.g., a valid legal request) or to protect the rights, safety, or security of users, the public, or Reboot — and in a business transfer (merger/acquisition), in which case this Policy continues to govern.
6. International data transfers
The Service is operated from [country/region]. If you access it from elsewhere, your data may be processed there. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers. [confirm data location with counsel]
7. Data retention
We keep data for as long as your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period, except where longer retention is required by law or for legitimate security/audit purposes (e.g., security logs). You may request deletion (Section 9). On account termination, we delete or anonymize your data per our retention schedule. [state specific periods with counsel — e.g., logs N days, backups N days]
8. Security
We apply administrative, technical, and physical safeguards appropriate to a security product, including encryption in transit, encryption of sensitive stored secrets, hashed passwords, access controls, two-factor authentication, and audit logging. No system is perfectly secure; we cannot guarantee absolute security, but we work to protect your data and will notify affected users and authorities of a breach as required by law.
9. Your rights and choices
Depending on where you live (e.g., GDPR/UK GDPR, California CCPA/CPRA), you may have the right to: access, correct, delete, or port your data; object to or restrict certain processing; and withdraw consent. California residents: we do not sell or "share" personal information as defined by the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. To exercise rights, contact [privacy@rebootcs.com]; we will verify and respond within the time the law requires. You will not be discriminated against for exercising these rights.
For End Client data managed by a Partner, direct your request to the Partner (controller); we will assist the Partner as processor.
10. Children
The Service is for business/professional use and is not directed to children under 16, and we do not knowingly collect their data. If you believe a child's data was provided, contact us and we will delete it.
11. Cookies and tracking
The portal uses only strictly necessary cookies (e.g., session, authentication, CSRF). We do not use advertising or third-party analytics/tracking cookies. [confirm no analytics added later]
12. Changes to this Policy
We may update this Policy. Material changes will be notified (email or in-portal) before they take effect, and the "Effective date" above will change. Continued use after that date means you accept the updated Policy.
13. Contact
Reboot Computer Services Inc. [mailing address] Privacy: [privacy@rebootcs.com] · Support: [support@antiv.io]