[SiteSecura PVT LTD], doing business as SiteSecura ("SiteSecura", "we", "us", or "our"), respects your privacy and is committed to protecting the information you provide to us.
This Privacy Policy explains how we collect, use, store, protect, and disclose information when you access or use SiteSecura, including our website security assessment tools, monitoring infrastructure, and reporting services.
1. Information We Collect
Depending on how you interact with SiteSecura, we may collect the following categories of information:
Account Information
When you register an account, we collect your name, email address, authentication identifiers, account preferences, and organization details where applicable. Authentication is securely managed through Firebase Authentication or our configured identity provider. We do not store plain-text passwords in our database.
Website and Domain Information
When you submit a website or domain for assessment, we collect the domain name, normalized domain, scan configuration, monitoring preferences, scan timestamps, and target metadata. We process this information solely to perform the requested security assessment.
Security Assessment Data
We process automated scan observations, including security scores, itemized findings, evidence snippets (such as public HTTP response headers, SSL/TLS handshake ciphers, and DNS records), recommendations, historical trends, monitoring logs, and generated PDF reports.
Billing Information
Subscription payments are processed securely through Stripe. We store the Stripe customer identifier, subscription identifier, plan tier, billing cycle dates, and payment status. SiteSecura never collects or stores raw credit or debit card numbers in its application database.
Technical and Log Information
When you browse or interact with the platform, our servers automatically log technical details including IP address, user agent, browser type, device information, access timestamps, HTTP request paths, error logs, and session identifiers.
Communication Information
If you contact us for customer support or inquiries, we collect your email address, name, support ticket content, correspondence history, and any voluntary attachments.
2. How We Use Information
We process collected information to:
- Deliver automated website security assessments and calculate deterministic scores;
- Generate interactive audit dashboards and exportable PDF reports;
- Provide recurring website monitoring and dispatch SSL expiration or score drop alerts;
- Manage user accounts, team member seats, and agency permissions;
- Process paid subscription billing through our payment partner;
- Provide customer support and respond to technical inquiries;
- Detect and prevent platform abuse, unauthorized scanning, rate-limit evasion, and fraud;
- Troubleshoot technical issues and maintain system availability and security; and
- Comply with applicable legal, statutory, and contractual requirements.
3. Domain and Scan Data
When you submit a domain to SiteSecura, we query publicly available web server endpoints and public DNS servers to perform the requested defensive assessment. SiteSecura does not independently verify whether you own or are authorized to assess the submitted target.
You are solely responsible for ensuring that you have appropriate authorization before submitting any web property to SiteSecura. For detailed guidelines, please review our Authorized Scanning Policy.
5. Third-Party Service Providers
We partner with reputable infrastructure and software providers to operate SiteSecura. These providers process data solely on our behalf under contractual confidentiality and data protection standards:
- Firebase Authentication (Google): Identity verification and session tokens;
- Stripe: Payment processing and PCI-compliant transaction management;
- Cloudflare: DNS resolution, CDN acceleration, and DDoS mitigation;
- Transactional Email Services: Automated notification dispatch; and
- Cloud Infrastructure Providers: Secure database storage and task queue execution.
6. Data Sharing
We do not sell personal data. We may share information only in the following circumstances:
- With vetted third-party service providers necessary to operate the platform;
- With professional advisers (legal counsel, accountants) bound by confidentiality;
- With law enforcement or regulatory authorities when compelled by lawful process or court order; and
- In connection with an organizational merger, acquisition, restructuring, or asset transfer, subject to standard confidentiality protections.
7. Data Retention
We retain personal data and security assessment records only for as long as necessary to fulfill the purposes described in this policy, satisfy legal obligations, and enforce our agreements.
Scan history and generated report retention is governed by your active subscription plan:
- Free Plan: 7 days retention;
- Basic Plan: 30 days retention;
- Pro Plan: 90 days retention;
- Agency Plan: 365 days retention.
You may delete registered websites and historical scans from your dashboard at any time. Server logs and billing records may be retained longer where required by accounting, tax, or security compliance standards.
8. Data Security
We maintain rigorous technical and organizational safeguards designed to protect personal and scan data against unauthorized access, loss, alteration, or disclosure:
- Mandatory TLS/HTTPS encryption for all data in transit;
- Role-based access controls (RBAC) and least-privilege administrative policies;
- SSRF and network isolation protections preventing unauthorized internal scanning;
- Regular dependency vulnerability patching and environment monitoring; and
- Automated database backups and encrypted storage volumes.
While we implement industry-standard defensive controls, no Internet-connected service can guarantee absolute security.
9. International Data Transfers
Because our infrastructure and service providers operate globally, information collected by SiteSecura may be transferred, stored, and processed in jurisdictions outside your home country. Where required by applicable data protection laws, appropriate transfer mechanisms and contractual safeguards are implemented.
10. Your Rights
Depending on your location and applicable privacy legislation, you may hold specific rights regarding your personal information, including:
- The right to request access to the personal data we hold about you;
- The right to request correction of inaccurate or incomplete personal records;
- The right to request deletion of your account and personal information;
- The right to restrict or object to certain processing activities; and
- The right to data portability.
To exercise your privacy rights, submit a written request to [legal@sitesecura.com]. We may verify your identity prior to completing your request.
11. Children's Privacy
SiteSecura is an enterprise SaaS platform intended exclusively for adult professionals and organizations. We do not knowingly collect personal data from children under the age of 16. If we become aware that personal information of a child has been collected, we will take prompt steps to remove that data.
12. Changes to This Privacy Policy
We may revise this Privacy Policy periodically to reflect technological, operational, or regulatory updates. When changes are posted, the "Last Updated" date at the top of this page will be revised. Material updates will be communicated through appropriate in-app notices or email where feasible.
13. Contact Information
If you have questions, feedback, or requests regarding this Privacy Policy, please contact us:
Entity: [SiteSecura]
Privacy Inquiries: [legal@sitesecura.com]
Registered Address: [Indore, Madhya Pradesh]