1. INFORMATION WE COLLECT
Scanwise.dev collects minimal necessary information to deliver automated security reconnaissance:
- Account Credentials: Email address and authentication tokens via Firebase Auth (Google / Email).
- Scan Data: Submitted target domain names, audit timestamps, HTTP header response metadata, DNS records, and vulnerability reports.
- Payment Information: Handled securely by our payment processor, Paddle.com. We do not store raw credit card numbers or banking details on our servers.
2. HOW WE USE YOUR DATA
We process data strictly for:
- Generating vulnerability reports and executive security audits.
- Managing account scan credits and subscription statuses.
- Providing AI-assisted code remediation patches via OpenAI API.
- Improving platform performance and preventing abuse.
3. THIRD-PARTY PROCESSORS
We integrate with trusted third-party service providers:
- Paddle.com: Merchant of Record processing checkout transactions and subscriptions.
- Firebase (Google Cloud): User authentication and identity verification.
- OpenAI: LLM model inference for security patch code generation.
4. YOUR RIGHTS & DATA RETENTION
You have the right to request access to your personal data, request deletion of your scan history, or delete your account at any time by contacting privacy@scanwise.dev.