1. INFORMATION WE COLLECT
Scanwise.dev is operated by an independent developer ("we", "us"), the data controller for the information described below. Scanwise.dev collects minimal necessary information to deliver automated security reconnaissance:
- Account Credentials: Email address and authentication tokens via Firebase Auth (Google / Email).
- Scan Data: Submitted target domain names, audit timestamps, HTTP header response metadata, DNS records, and vulnerability reports.
- Abuse-prevention data: When the free starter credit is granted we store a keyed one-way hash of your network address (for IPv6, of its /64 prefix) — never the address itself — to limit free credits to 3 per network per 30 days. These records are deleted automatically after 30 days.
- Payment Information: Crypto payments are handled by our payment processor, OxaPay. From a payment we receive and store your email address, the amount paid, the plan purchased, and the OxaPay transaction / track ID. We never receive card numbers, bank details, or wallet private keys.
2. HOW WE USE YOUR DATA
We process data strictly for:
- Generating vulnerability reports and executive security audits.
- Managing your account scan-credit balance and Pro status.
- Providing AI-assisted code remediation via the OpenAI API. When you request the AI Remediation Blueprint, a condensed version of that scan's findings (titles, categories, severities, evidence snippets, detected tech stack) is sent to OpenAI to generate the report. It is not used to train models.
- Improving platform performance and preventing abuse.
3. THIRD-PARTY PROCESSORS
We integrate with trusted third-party service providers:
- OxaPay: Crypto payment processing. Receives your email, the payment amount, and the plan; returns a transaction / track ID.
- Firebase (Google Cloud): User authentication and identity verification.
- OpenAI: LLM inference for the AI Remediation Blueprint. Receives a condensed copy of the relevant scan's findings only when you request that report.
4. YOUR RIGHTS & DATA RETENTION
You have the right to request access to your personal data, request deletion of your scan history, or delete your account at any time by contacting privacy@scanwise.dev.