Privacy Policy

Overview

This Privacy Policy describes how Thandev ("we," "our," or "us") collects, uses, stores, and protects information when you use our cybersecurity scanning and threat intelligence platform. By using our services, you agree to the collection and use of information in accordance with this policy. Scan targets (URLs/domains) and scan results are stored in our server database to provide you with access to your scan history and reports.

Information We Collect

1. Account Information

When you create an account, we collect:

• Email address (required for account creation)
• Username (required for account identification)
• Full name (optional, if provided)
• Authentication provider information (e.g., GitHub username and ID if you sign in with GitHub)

2. Scan Data

When you use our scanning services, we collect and store the following information in our server database:

• Target URLs and domains you submit for scanning
• Scan configurations and preferences (scan level, tool selections)
• Scan execution timestamps (created, started, completed)
• Scan results, including vulnerability findings, tool outputs, and generated reports
• Scan status and error messages (if any)
• Project information (project names, descriptions, associated URLs)

3. Usage and Technical Logs

We may automatically collect technical information when you access our platform:

• IP address (for security monitoring and abuse prevention)
• User agent and browser type (for compatibility and debugging)
• Request logs and API usage patterns (for service improvement)
• Error logs (for troubleshooting and platform stability)

4. Cookies and Local Storage

We use cookies and local storage for:

• Session management and authentication (to keep you logged in)
• User preferences and settings

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of our platform.

How We Use Your Information

We use the information we collect to:

• Provide our services: Execute security scans, generate reports, display scan history and results in your dashboard
• Maintain and secure the platform: Debug issues, monitor for abuse and security threats, prevent unauthorized access
• Communications: Send product updates, security notifications, and respond to support requests (if you contact us)
• Service improvement: Analyze usage patterns to enhance features and user experience
• Legal compliance: Comply with applicable laws, regulations, and legal processes

Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

• Service providers and subprocessors: We may share data with trusted third-party service providers who assist in operating our platform, such as:
  • Hosting and cloud infrastructure providers
  • Database and storage services
• Legal compliance: When required by law, court order, or government request, or to protect our rights, property, or safety
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Data Retention

We retain your information as follows:

• Account data and scan results: We retain your account information and scan data while your account is active. You can request deletion of your account and associated data at any time.
• Deletion requests: Upon account deletion or data deletion request, we will delete your personal information and scan data from our systems, subject to any legal retention requirements.

We retain information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit (HTTPS/TLS) for all data transmission
• Access controls and authentication mechanisms
• Least privilege access principles for our team
• Security monitoring and incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

International Users

Your information may be processed and stored in locations where our service providers operate, which may be outside your country of residence. By using our services, you consent to the transfer of your information to these locations. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Your Choices and Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information and scan data
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and scan data
• Data portability: Request a copy of your data in a portable format
• Objection: Object to certain processing activities (where applicable)
• Withdrawal of consent: Withdraw consent where processing is based on consent

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing and the right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at help@thandev.io. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately at help@thandev.io, and we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: