Privacy Policy

1. Introduction

WebSecurityCheck ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website security scanning and compliance assessment services.

By using WebSecurityCheck, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our services.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address
• Name (optional)
• Payment information (processed securely via Stripe)
• Company name (optional)

2.2 Domain Information

When you add domains for scanning, we collect:

• Domain names you submit for scanning
• DNS verification records
• Scan results and security assessments
• Historical scan data

2.3 Technical Information

We automatically collect:

• IP address
• Browser type and version
• Device information
• Usage patterns and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our security scanning services
• Process your transactions and manage your subscription
• Send you service-related communications and alerts
• Improve and optimize our services
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Generate aggregated, anonymized statistics

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

Third-party companies that help us operate our services, including payment processors (Stripe), cloud hosting providers, and analytics services.

4.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS 1.3) and at rest
• Secure password hashing (bcrypt)
• Regular security audits and assessments
• Access controls and authentication
• Monitoring and logging of system access

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Scan history is retained based on your subscription plan:

• Free plan: 30 days
• Freelancer plan: 3 months
• Small Business plan: 12 months
• Corporate plan: Unlimited

After account deletion, we may retain certain information for legal compliance, fraud prevention, or legitimate business purposes for up to 90 days.

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at contact@websecuritycheck.dev.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze usage patterns
• Improve our services

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

10. Children's Privacy

WebSecurityCheck is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: