Privacy Policy

1. Introduction

sec.rocks ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security scanning and asset discovery platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Organization details
• Authentication credentials (securely hashed)
• Account preferences and settings

2.2 Scanning Data

When you use our scanning services, we collect:

• Target domains and IP addresses you submit for scanning
• Scan results including discovered subdomains, open ports, and services
• Vulnerability findings and security assessments
• Scan history and configurations

2.3 Usage Information

We automatically collect:

• Log data (IP addresses, browser type, access times)
• Usage patterns and feature interactions
• Performance metrics and error reports
• Analytics data to improve our services

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our security scanning services
• Process and execute scan requests
• Send security alerts and notifications
• Improve and optimize our platform
• Detect and prevent security threats and abuse
• Comply with legal obligations
• Communicate with you about your account and services

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Secure cloud infrastructure with redundancy
• Regular backups and disaster recovery procedures

Your scan data is stored on secure servers and retained according to your subscription plan and applicable data retention requirements.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data:

• With your consent: When you explicitly authorize us to share information
• Service providers: With trusted third-party services that help us operate our platform (cloud hosting, analytics, payment processing)
• Legal requirements: When required by law, regulation, legal process, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect our rights, privacy, safety, or property, and that of our users or the public

6. Your Rights and Choices

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete data
• Request deletion of your account and associated data
• Export your scan data
• Opt-out of marketing communications
• Object to certain data processing activities

To exercise these rights, please contact us at privacy@sec.rocks.

7. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Scan data is retained based on your subscription plan. After account deletion, we may retain certain information as required by law or for legitimate business purposes.

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and provide personalized features. You can control cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.

9. Third-Party Services

Our platform may integrate with or link to third-party services. This Privacy Policy does not apply to third-party websites or services. We encourage you to review the privacy policies of any third-party services you access.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: