Privacy Policy

Introduction

Vulnox ("Company," "we," "us," "our," or "our Company") operates the Vulnox website (the "Site") and provides security and compliance assessment services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you visit our Site and use our Services.

We are committed to protecting your privacy and ensuring you have a positive experience on our Site and when using our Services. Please read this Privacy Policy carefully. If you do not agree with any part of this policy, please do not use our Site or Services.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide directly to us, including:

• Account registration information (name, email address, company name, job title)
• Profile information and preferences
• Payment information (processed securely through third-party payment processors)
• Communication information (emails, chat messages, support tickets)
• Assessment information (target URLs, frameworks, scanning parameters)
• Documents and files uploaded for analysis
• Feedback, suggestions, and inquiries

1.2 Information Collected Automatically

When you visit our Site or use our Services, we automatically collect certain information:

• Device information (device type, operating system, browser type)
• Usage information (pages visited, time spent, links clicked)
• IP address and geolocation data
• Cookies and similar tracking technologies
• Log information (date, time, referring URL)
• Performance and error data

1.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment processors and financial institutions
• Social media platforms (if you connect your account)
• Business partners and service providers
• Publicly available sources for security research purposes

2. How We Use Your Information

We use the information we collect for various purposes:

• Providing, maintaining, and improving our Services
• Creating and managing your account
• Processing transactions and sending related information
• Conducting security assessments and generating reports
• Responding to inquiries and providing customer support
• Sending promotional communications and updates (with your consent)
• Analyzing usage patterns to improve user experience
• Ensuring compliance with legal obligations
• Detecting and preventing fraud or unauthorized access
• Complying with security and compliance standards

3. How We Share Your Information

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We share information with third parties who provide services on our behalf (hosting, payment processing, analytics)
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information with third parties
• Aggregated Data: We may share de-identified, aggregated data for research and analytics
• Security Assessment Partners: Your target URLs and scan parameters may be shared with our security assessment tools and vendors

4. Data Security

We implement appropriate technical, administrative, and physical security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of sensitive data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls and role-based permissions
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: You can request access to the personal information we hold about you
• Correction: You can request correction of inaccurate information
• Deletion: You can request deletion of your information (subject to legal obligations)
• Portability: You can request a copy of your information in a portable format
• Opt-Out: You can opt out of receiving promotional communications
• Cookie Preferences: You can control cookie settings through your browser

To exercise any of these rights, please contact us at info@vulnox.io.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, remember your preferences, and analyze Site usage. Types of cookies include:

• Essential Cookies: Required for site functionality
• Performance Cookies: Help us understand how you use our Site
• Preference Cookies: Remember your settings and preferences
• Advertising Cookies: Used for targeted advertising (with your consent)

You can control cookies through your browser settings. Note that disabling cookies may affect Site functionality.

7. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. Retention periods vary based on the type of information and the purpose for which we use it. For example:

• Account information is retained while your account is active
• Assessment reports are retained for the duration of your subscription and as required by law
• Usage logs are typically retained for 12 months
• Legal hold information may be retained longer if required by law

8. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

9. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information and terminate the child's account.

10. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to the transfer of your information to countries outside your country of residence.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

• Know what personal information is collected, used, and shared
• Delete personal information collected from you
• Opt-out of the sale or sharing of your personal information
• Non-discrimination for exercising your CCPA/CPRA rights

To submit a request, please contact us at info@vulnox.io.

12. European Privacy Rights (GDPR)

If you are in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, delete, restrict, and port your personal information. Our legal basis for processing your information includes:

• Contract performance (providing our Services)
• Legitimate interests
• Your explicit consent
• Legal compliance

To exercise your rights or lodge a complaint, please contact us at info@vulnox.io.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our Site and updating the "Last Updated" date. Your continued use of our Services after such modifications constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at: