DATA PROTECTION

Privacy Policy

Last updated: February 11, 2026

1. Introduction

Vulnios ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hybrid cybersecurity platform, including our website, web application, and related services (collectively, the "Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and organization details. Authentication is handled securely through Firebase Authentication.

2.2 Usage Data

We collect information about how you interact with our Service, including pages visited, features used, scan jobs initiated, and timestamps. This data helps us improve the platform.

2.3 Scan Data

When you run vulnerability scans, we process the target information and scan results. Scan findings are stored in your organization's isolated data partition and are never shared with other users or organizations.

2.4 Cookies & Analytics

We use Google Analytics to understand site usage patterns. Analytics cookies are only set with your explicit consent via our cookie banner. We implement Google Consent Mode v2 to respect your choices.

3. How We Use Your Information

›To provide, maintain, and improve the Service
›To process your vulnerability scans and deliver results
›To send security alerts and notifications you have opted into
›To provide customer support
›To detect, prevent, and address technical issues and abuse
›To comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data:

›All data is encrypted in transit (TLS 1.3) and at rest
›Multi-tenant data isolation ensures your data is separated from other organizations
›Firebase App Check with reCAPTCHA Enterprise protects against abuse
›Role-based access control (RBAC) enforces least-privilege access
›Regular security audits and monitoring

5. Data Retention

We retain your account information for as long as your account is active. Scan results and findings are retained according to your subscription plan. You may request deletion of your data at any time through the platform settings or by contacting us.

6. Third-Party Services

We use the following third-party services:

›Google Firebase — Authentication, database, hosting, and cloud functions
›Google Analytics — Website usage analytics (with consent)
›Google reCAPTCHA Enterprise — Bot protection and abuse prevention
›Stripe — Payment processing (we do not store payment card details)
›Resend — Transactional email delivery
›NVD / FIRST.org / CISA — Public vulnerability intelligence data

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

›Access — Request a copy of your personal data
›Rectification — Request correction of inaccurate data
›Erasure — Request deletion of your personal data
›Portability — Request export of your data in a portable format
›Objection — Object to processing of your personal data
›Withdraw Consent — Withdraw previously given consent at any time

To exercise these rights, use the Data Export and Data Deletion features in your account settings, or contact us at privacy@vulnios.com.

8. International Data Transfers

Our Service is hosted on Google Cloud Platform. Your data may be processed in the United States or other locations where Google operates data centers. We ensure appropriate safeguards are in place for international data transfers.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after any modifications indicates your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@vulnios.com