Privacy Policy

This Privacy Policy explains how Defentrium (“we”, “us”) collects, uses, and safeguards information when you use our website security testing platform, browser extension, and API (the “Service”).

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

Account data: your name, email address, and authentication identifiers provided when you sign in (including via Google or GitHub).

Scan data: the URLs you submit for analysis and the technical results generated from those scans (headers, TLS configuration, cookies, and other publicly observable security signals).

Usage data: log data such as scan counts, feature usage, and diagnostic information used to operate and improve the Service.

Billing data: when you subscribe to a paid plan, payments are processed by Stripe. We never store full card numbers; we retain only a customer identifier and subscription status.

To provide, maintain, and secure the Service, including running scans and generating reports.

To enforce plan limits, process subscriptions, and prevent abuse.

To send transactional messages such as scan results, security alerts, and billing notices.

To improve the accuracy of our security checks and AI-generated remediation guidance.

You are responsible for ensuring you are authorized to scan any URL you submit. Defentrium performs non-intrusive, read-only analysis of publicly available information and does not attempt to exploit vulnerabilities.

AI features only explain and prioritize deterministic findings - they never invent vulnerabilities and are clearly separated from raw scan data.

We do not sell your personal data. We share data only with service providers that help us operate the Service (for example, Stripe for payments and our cloud hosting and AI providers), and only to the extent needed to deliver the Service.

We may disclose information if required by law or to protect the rights, property, or safety of Defentrium and its users.

Scan history is retained according to your plan (for example, 30 days on the Free plan). You may delete projects and scans at any time from your dashboard.

We apply industry-standard safeguards to protect your data in transit and at rest. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You may access, correct, export, or delete your account data. To exercise these rights, or if you have any questions about this policy, contact us using the details below.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “last updated” date at the top of this page.