Privacy Policy

Last Updated: October 19, 2025

🔒 Your Privacy Matters

We are committed to protecting your privacy and handling your data responsibly. We only collect information necessary to provide the Service and never sell your personal information to third parties.

1. Information We Collect

We collect the following types of information:

  • Account Information: Email address, name, and authentication credentials
  • Usage Data: Scan history, domains scanned, and scan configurations
  • Technical Data: IP addresses, browser information, and access logs
  • Scan Results: Vulnerability findings and security assessment data

2. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process and store scan results
  • Authenticate and authorize users
  • Improve service quality and features
  • Communicate important updates
  • Detect and prevent abuse or misuse
  • Comply with legal obligations

3. Data Storage and Security

We implement appropriate security measures to protect your data:

  • Encryption of data in transit and at rest
  • Secure authentication mechanisms (OAuth 2.0, JWT)
  • Regular security audits and updates
  • Access controls and comprehensive logging
  • Industry-standard security practices
  • Infrastructure hosted on Cloudflare's secure network

4. Data Retention

We retain your data for as long as:

  • Your account remains active
  • Necessary to provide the Service
  • Required by law or regulation
  • Needed for legitimate business purposes

You may request deletion of your account and associated data at any time by contacting our support team.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service Providers: Third parties who help operate the Service (e.g., Cloudflare for infrastructure)
  • Legal Requirements: When required by law, subpoena, or legal process
  • Security Threats: To prevent fraud, abuse, or security threats
  • Business Transfers: In connection with mergers, acquisitions, or asset sales

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Request export of your data in a machine-readable format
  • Objection: Object to processing of your data
  • Restriction: Request restriction of processing
  • Withdrawal: Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@webscanner.example.com

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain user sessions and authentication state
  • Remember user preferences
  • Analyze service usage and performance
  • Improve user experience

You can control cookie preferences through your browser settings. Note that disabling cookies may affect functionality of the Service.

8. Third-Party Services

The Service integrates with third-party services including:

  • Google OAuth: For authentication (subject to Google's Privacy Policy)
  • Cloudflare: For infrastructure and security (subject to Cloudflare's Privacy Policy)

We are not responsible for the privacy practices of third parties. Please review their privacy policies.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

  • Standard contractual clauses
  • Adequacy decisions by regulatory authorities
  • Privacy Shield frameworks (where applicable)

11. Security Breach Notification

In the event of a data breach that affects your personal information, we will:

  • Notify you within 72 hours of discovery
  • Describe the nature of the breach
  • Provide information about protective measures taken
  • Offer guidance on steps you can take

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through:

  • Email notification to your registered address
  • Prominent notice on the Service
  • In-app notifications

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For privacy-related questions, to exercise your rights, or to report concerns: