Privacy Policy

Sentraxis ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. By using Sentraxis, you consent to the practices described in this policy.

We collect the following types of information:

Account Information:

• Name and email address provided during registration
• Authentication data managed securely by Clerk
• Billing information processed securely by our payment provider

Usage Information:

• Target URLs submitted for scanning
• Scan results and vulnerability reports
• API usage and access logs
• IP addresses and browser information

Technical Information:

• Log data including access times and pages viewed
• Device information and browser type
• Cookies and similar tracking technologies

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage subscriptions
• Generate vulnerability scan reports
• Send transactional emails including scan completion notifications
• Respond to support requests and legal inquiries
• Detect and prevent fraudulent or unauthorized activity
• Comply with legal obligations
• Improve and develop new features of the Service

We do not sell your personal data. We share data only with the following trusted third parties:

• Clerk — Authentication and user management
• Supabase — Secure database storage
• Vercel — Cloud hosting and deployment
• Groq — AI-powered remediation generation
• GitHub — Scan engine execution via GitHub Actions
• Payment Provider — Secure payment processing

Each third party is bound by their own privacy policies and data processing agreements. We may also disclose your information if required by law or to protect the rights and safety of Sentraxis and its users.

We retain your data for the following periods:

• Account data — retained for the duration of your account plus 90 days after deletion
• Scan reports — retained according to your plan (30 days for Starter, 90 days for Pro, unlimited for Enterprise)
• Payment records — retained for 7 years as required by financial regulations
• Access logs — retained for 30 days

We implement industry-standard security measures to protect your data including:

• Encryption of data in transit using TLS/HTTPS
• Encryption of data at rest in our database
• Row-level security policies on all database tables
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to user data

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data
• Portability — Request your data in a machine-readable format
• Objection — Object to certain processing of your data
• Restriction — Request restriction of processing your data

To exercise any of these rights, contact us at hassanofficial9703+legal@gmail.com. We will respond within 30 days.

We use essential cookies to maintain your session and authentication state. We do not use advertising or tracking cookies. You can control cookie settings through your browser, but disabling essential cookies may affect the functionality of the Service.

Sentraxis operates globally. Your data may be processed in countries other than your own, including the United States, where our service providers are located. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us immediately at hassanofficial9703+legal@gmail.com.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

For privacy-related inquiries, data requests, or concerns:

Sentraxis Privacy Team
Email: hassanofficial9703+legal@gmail.com
Response time: Within 30 days