Privacy Policy
VulScan Pro — Nexdecade Technology (Pvt) LTD
1. Information We Collect
- Account information: name, email, organisation name
- Scan targets, results, and findings you submit
- Usage logs: IP address, login timestamps, actions taken
- Billing information (processed securely by Stripe — we do not store card details)
2. How We Use Your Information
- To provide and improve the Platform
- To send transactional emails (scan completions, alerts, invitations)
- To enforce our Terms of Service
- To comply with legal obligations
3. Data Isolation
All data is scoped strictly to your organisation. Other organisations cannot access your scan data, findings, or reports.
4. Data Retention
Scan reports are retained for 90 days by default. Audit logs are retained for 12 months. You may request deletion of your data by contacting us.
5. Third-Party Services
We use Stripe for payments, Google (Gmail SMTP) for email delivery. These services have their own privacy policies.
6. Security
We use TLS encryption in transit, bcrypt password hashing, CSRF protection, and rate limiting to protect your account and data.
7. Contact
For privacy inquiries, contact privacy@nexdecade.com.