1. Who We Are

SuperCom Ltd.
Headquarters: Tel Aviv, Israel
Website: https://www.supercom.com
SuperCom acts as a Data Controller when it determines the purposes and means of processing personal data, and as a Data Processor when processing data on behalf of customers (e.g., government agencies or authorized service providers).

For privacy-related inquiries, complaints, or requests, please contact:

Email: general@supercom.com

2. Personal Data We Collect

A. Data Provided Directly by Users

• Name, phone number, email address

• Professional or organizational details

• Login credentials

• Support requests and communications

• Billing and administrative information

• • Information submitted through website contact forms, demo requests, support inquiries, event registrations, employment applications, or other communications submitted through our website.

B. Data Collected Automatically

• IP address, device identifiers, MAC address

• Browser type, operating system, device type

• System logs, timestamps, and usage behaviors

• Analytical and performance metrics

C. Data Collected Through SuperCom Systems and Devices

Depending on the Service, this may include:

• Device telemetry, operational logs

• Location or proximity information (where services require it)

• Monitoring system data used for compliance reporting

• Security, integrity, and status data from devices

Note: For government electronic monitoring deployments, the specific type of personal data processed is determined by the relevant government customer and their regulations.

D. Third-Party Data Sources

• Authentication providers (e.g., Google Workspace, Microsoft Entra)

• Integration partners and authorized service providers

• Public records and regulatory databases

3. How We Use Personal Data

SuperCom processes personal data for the following purposes:

1. To provide and operate our Services

2. To configure and manage user accounts and system access

3. To offer technical support and resolve issues

4. To maintain system safety, performance, and security

5. To meet regulatory, contractual, and audit requirements

6. To analyze usage trends and improve our technologies

7. To issue alerts, notifications, and service messages

8. Managing billing, invoicing, and financial transactions

9. To comply with local and international laws and authorities

SuperCom does not sell personal data.

4. Legal Bases for Processing (Israel / US / EU)

European Union (GDPR)

• Performance of a contract

• Legitimate interests (e.g., security, fraud prevention)

• Legal obligation

• Consent, when required

United States

• Based on contractual requirements

• Legitimate business purposes

• Compliance with federal, state, or regulatory obligations

Israel (Privacy Protection Law)

• Contractual performance

• Legitimate business purpose

• Legal requirements

Consent when needed

5. How We Share Personal Data

We may share personal data only with:

A. Trusted Third Parties

• Cloud hosting providers

• Telecommunications and infrastructure partners

• Customer support and maintenance subcontractors

• Analytics, monitoring, or security vendors

B. Government and Law-Enforcement Clients

For electronic monitoring solutions, we may process or transmit data strictly according to contractual and statutory requirements defined by the relevant authority.

C. Legal Authorities

When required by:

• Court order

• Regulatory demand

Applicable law

D. Internal Corporate Affiliates

Subsidiaries or entities within the SuperCom group, under strict confidentiality and security standards.

All third-party processors are bound by data protection agreements (DPAs), confidentiality obligations, and security controls.

6. International Data Transfers

SuperCom operates globally with infrastructure in multiple regions. If personal data is transferred outside the EU/EEA, UK, Israel, or other regulated environments:

• We rely on EU Standard Contractual Clauses (SCCs)

• Or other legal transfer mechanisms approved by relevant authorities

• Combined with strong technical and organizational security measures

7. Data Retention

SuperCom retains personal data only for as long as necessary:

• To fulfill the purpose for which it was collected

• To comply with contractual obligations to our customers

• To meet legal, tax, audit, or regulatory requirements

• To maintain system integrity and resolve disputes

After the retention period ends, data is securely deleted, anonymized, or archived according to applicable law.

8. Data Security

SuperCom implements enterprise-grade security controls, including:

• Encryption at rest and in transit

• Multi-layer infrastructure segmentation

• Role-based access control and zero-trust principles

• Regular penetration testing and vulnerability assessments

• Secure development lifecycle (SDLC) practices

• 24/7 monitoring, logging, and threat detection

• Business continuity and disaster recovery measures

SuperCom is committed to industry-leading data protection practices.

9. Rights

Depending on your jurisdiction, individuals may exercise the following rights:

• Access to personal data

• Correction of inaccurate information

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent where consent is the basis for processing

• File a complaint with a relevant supervisory authority

To submit a privacy request:
Email: general@supercom.com

For EU residents: complaints may be filed with your national Data Protection Authority.
For Israeli residents: complaints may be filed with the Israeli Privacy Protection Authority.
For US residents: rights vary by state (e.g., CCPA, CPRA, VCDPA).

10. Cookies and Tracking Technologies

SuperCom uses cookies and similar technologies to operate, secure, and improve its website and services. These technologies may include:

• Essential cookies required for website functionality and security

• Functional cookies that remember user preferences and settings

• Analytics cookies that help us understand website usage and improve performance

• Security-related cookies used to protect systems, detect suspicious activity, and maintain service integrity

Users may manage cookie preferences through browser settings or through the cookie consent banner where available. Where required by applicable law, certain cookies are activated only after the user's consent through our Cookie Consent Banner.

11. Children’s Privacy

SuperCom’s general Services are not directed to children under 16.
For government or law-enforcement electronic monitoring deployments, SuperCom processes data only under the instructions and legal authority of the relevant customer.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Changes will be posted with an updated “Last Updated” date, and users will be notified where legally required.

13. Contact Us

For privacy-related questions, complaints, or requests, please contact:

SuperCom Ltd.
Email: general@supercom.com
Address: Tel Aviv