CVSEEYOU

1. Introduction

CVSEEYOU ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security scanning service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Name and email address
Organization name
Password (encrypted)
Billing information (processed by our payment provider)

2.2 Scan Data

When you use our scanning service, we collect:

Target URLs, IP addresses, and domain names you submit for scanning
Scan results and vulnerability findings
Source code uploaded for SAST analysis (deleted after processing)
Configuration settings and scan parameters

2.3 Usage Data

We automatically collect:

IP address and browser type
Pages visited and features used
Time and date of access
Device information

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain our Service
Process and complete security scans
Generate compliance reports and analytics
Send you technical notices and support messages
Respond to your comments, questions, and requests
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent transactions and abuse
Improve and personalize the Service

4. Data Security

We implement industry-standard security measures to protect your data:

All data is encrypted in transit using TLS 1.3
Data at rest is encrypted using AES-256
Access controls and authentication mechanisms
Regular security audits and penetration testing
SOC 2 Type II certified infrastructure
Employee security training and background checks

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Scan results are retained according to your subscription plan. Uploaded source code for SAST analysis is automatically deleted within 24 hours of scan completion. You may request deletion of your data at any time.

6. Data Sharing

We do not sell your personal information. We may share data with:

Service Providers: Third parties that perform services on our behalf (hosting, analytics, payment processing)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: When you have given us permission to share

7. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Request transfer of your data
Opt-out: Opt out of marketing communications

To exercise these rights, contact us at [email protected].

8. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, some parts of our Service may not function properly without cookies.

9. International Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

[email protected]