Privacy notice
A draft explaining the data the product needs and how it is isolated, pending owner and legal-counsel approval.
This is a technically complete surface for approved content, but the current text is an operational draft, not legal advice. Do not use it for public paid sales until entity details are completed and formally approved.
Data processed
- Account, organisation membership and project settings.
- Customer-authorised website URLs and technical scan findings.
- Private evidence such as screenshots, reports, usage and billing records when enabled.
- Support and remediation requests and customer-selected references.
Purpose and legal basis
Data is used to run scans, display evidence, protect accounts, meter usage, perform the contract and support customers. The owner must confirm applicable legal bases and local rights before production.
Sharing and external processing
An available adapter does not mean a provider is active. Providers belong in the approved notice only after account, contract and production-environment verification. AI-assisted review is optional and requires disclosure of provider, data scope and retention when enabled.
Isolation, retention and rights
Screenshots and reports are treated as private evidence and served through organisation-authorised routes. The deployment owner must approve retention periods and storage providers before production.
Data is organisation-isolated and eligible records follow the configured retention period. The owner must add an approved rights-request contact and response procedure.