1. Information We Collect
When you use VulnHawk, we collect:
- Account information: username, email, hashed password, Google account ID (if applicable)
- Usage data: scans performed, targets, findings, timestamps
- Access data: IP address, user agent, requests made
- Billing data: processed by Stripe; we store only your customer and subscription IDs
2. How We Use Information
We use collected information to operate the Service, enforce quotas, prevent abuse, and improve the product. We do not sell your data.
3. Log Retention
Access logs are retained for 30 days, scan logs for 90 days, and audit logs for 365 days.
4. Data Sharing
We share data only with service providers necessary to operate the Service (Stripe for billing, Resend for email, Google for authentication, Render for hosting) and as required by law.
5. Your Rights
You may request access to, correction of, or deletion of your account data by contacting admin@thepandadev.com.
6. Security
We use industry-standard security practices including bcrypt password hashing, HTTPS-only cookies, CSRF protection, and rate limiting.
7. Changes
We may update this policy at any time. Material changes will be announced via email.