Data Protection

PrivacyPolicy

Last updated: July 15, 2025

Introduction

At VulnScanAI ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered vulnerability scanning platform (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Data We Collect

a. Personal Information

When you register or use our Service, we may collect:

  • Name, email address, and contact details
  • Company information and job title
  • Billing and payment information
  • Authentication credentials

b. Scan Data

When performing security scans:

  • Target URLs and IP addresses
  • Scan configurations and parameters
  • Vulnerability findings and technical details
  • Metadata about scan results

c. Usage Data

We automatically collect:

  • Log data (IP addresses, browser type, pages visited)
  • Usage patterns and feature interactions
  • Performance metrics and error reports

2. How We Use Your Data

We use the collected data to:

  • Provide and maintain our Service
  • Improve and personalize your experience
  • Develop new features and capabilities
  • Enhance security and prevent fraud
  • Communicate with you about the Service
  • Generate aggregated, non-identifiable insights
  • Comply with legal obligations

3. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

  • Service providers who assist in our operations
  • Law enforcement when required by law
  • Affiliates and subsidiaries
  • Partners in anonymized, aggregated form

In case of business transfer (merger, acquisition), we will notify you before your information is transferred.

4. Data Security

We implement robust security measures:

  • Encryption of data in transit and at rest
  • Regular security audits and penetration testing
  • Access controls and least-privilege principles
  • Incident response procedures

Despite our measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain data only as long as necessary:

  • Account information: Until account deletion
  • Scan results: 90 days (configurable)
  • Billing records: 7 years for legal compliance

You may request deletion of your data, subject to legal requirements.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access and receive a copy of your data
  • Rectify inaccurate information
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent

To exercise these rights, contact us at privacy@vulnscanai.com.

7. Cookies & Tracking

We use cookies and similar technologies to:

  • Authenticate users and maintain sessions
  • Analyze service usage and performance
  • Remember preferences and settings

You can control cookies through your browser settings, but this may affect Service functionality.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for these transfers.

9. Children's Privacy

Our Service is not intended for users under 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will take steps to delete the information.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the Service or via email. Your continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests:

VulnScanAI Privacy Team
privacy@vulnscanai.com
123 Security Avenue
San Francisco, CA 94107

Your privacy matters to us

Last updated: July 15, 2025

Back to Home