Privacy Policy

1. Information We Collect

We collect the following types of information:

Account Information

• Email address
• Name (as provided through Microsoft authentication)
• Organization name (if provided)

Scan Target Information

• Domains and IP addresses you submit for scanning
• Scan results and vulnerability findings
• Asset inventory data

Usage Information

• Scan history and scheduling preferences
• Feature usage patterns
• Browser type and IP address

2. How We Use Your Information

We use the collected information to:

• Provide and improve the security scanning services
• Generate scan reports and vulnerability assessments
• Send service notifications and alerts
• Process payments and manage subscriptions
• Respond to support requests
• Analyze and improve Service performance

3. Data Retention

We retain your scan data for as long as your account is active. Scan results are stored to enable historical comparison and trend analysis. You may request deletion of your data at any time by contacting support.

• Active accounts: Data retained until account deletion
• Cancelled accounts: Data deleted within 90 days
• Scan results: Retained for 12 months for historical analysis

4. Data Sharing

We do NOT sell your personal information. We may share data with:

• Service Providers: Third-party services that help operate the platform (cloud hosting, payment processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Microsoft Azure infrastructure security
• Access controls and authentication
• Regular security assessments

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your scan data
• Opt out of marketing communications

7. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising trackers. Analytics data is collected in aggregate form to improve the Service.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

9. International Data Transfers

Data may be processed in the United States. By using the Service, you consent to the transfer of your data to the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at support@r3dteam.ai