Privacy principles
We keep the service focused on public exposure data, workspace records, and the minimum account information needed to run the product.
1
Data we collect
Account details such as your name, email address, and organization context when you create a workspace.
Assets you add for verification, scan targets you submit, generated findings, and product usage metadata needed to operate the service.
Operational and security logs such as authentication events, audit trails, and rate-limit activity.
2
How we use data
To create and secure your account, send verification and reset emails, and provide access to the workspace.
To run exposure scans, store results, show trends, and generate prioritized findings tied to your workspace.
To maintain service reliability, enforce abuse protections, and improve the product.
3
Public scan data
The free scan only processes public-domain information and externally visible signals from the domain you submit.
We do not claim ownership of the domain you scan. Public result views are limited and workspace data remains access-controlled.
4
Sharing
We do not sell personal data.
We may use trusted infrastructure and email providers to deliver the service, process authentication, and send notifications.
We may disclose information if required by law, to protect the service, or to respond to abuse or security incidents.
5
Retention
We keep data only as long as needed to operate the service, support your workspace, resolve issues, comply with obligations, or maintain security records.
If you delete an account or request removal, some records may still be retained for legal, audit, or security reasons.
6
Security
We use access controls, rate limits, scoped workspaces, and read-only scanning to reduce unnecessary exposure.
No online system is perfectly secure, and you should use strong passwords and protect your account credentials.
7
Your choices
You can update account details in the workspace and choose whether to continue using the service.
Where applicable, you may request access, correction, or deletion of your personal data by contacting us through the workspace.
8
International use
The service is open to public domains worldwide. If you use the service from outside our operating region, your data may be processed in other locations by our service providers.
9
Contact
For privacy requests or questions, use the workspace after sign-in so we can verify the account and respond securely.
This policy describes how HasafSec handles account, scan, and workspace data as of March 22, 2026.