Privacy Policy

1. Introduction

Desocialize Ltd ("we," "our," or "us") operates the WebGuarder DNS security scanning platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

Desocialize Ltd is the data controller responsible for your personal data. You can contact our Data Protection Officer at:

3. Data We Collect

3.1 Information You Provide

• Account Information: Email address, full name, and password (hashed)
• Team Information: Team name, description, and member details
• Domain Data: Domain names you add for scanning
• DNS Provider Credentials: API keys for DNS providers (encrypted at rest)
• Payment Information: Processed by PayPal/Stripe – we do not store card details

3.2 Information Collected Automatically

• Scan Results: DNS records, security findings, and vulnerability data
• Usage Data: Pages visited, features used, scan frequency
• Device Information: IP address, browser type, operating system
• Audit Logs: Actions taken within the platform for security purposes

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To provide the security scanning service you requested
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Consent: For optional marketing communications (you can withdraw anytime)
• Legal Obligations: To comply with applicable laws and regulations

5. How We Use Your Data

• Provide and maintain the WebGuarder service
• Process DNS security scans and generate vulnerability reports
• Manage your account and team memberships
• Process payments and manage subscriptions
• Send important service notifications (security alerts, scan completions)
• Improve our scanning algorithms and platform features
• Detect and prevent fraudulent or unauthorized activity
• Comply with legal obligations

6. Data Sharing

We do not sell your personal data. We may share data with:

• Payment Processors: PayPal and Stripe for payment processing
• Cloud Infrastructure: Secure hosting providers
• Legal Authorities: When required by law or to protect our rights
• Team Members: Within your organization as per your team settings

7. Your Rights

Under GDPR and CCPA, you have the following rights:

To exercise these rights, visit your Account Settings or contact us at [email protected].

8. Data Retention

• Account Data: Retained until you delete your account
• Scan Results: Retained for 12 months, then automatically deleted
• Audit Logs: Retained for 12 months for security compliance
• Payment Records: Retained for 7 years as required by tax regulations

9. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure password hashing (bcrypt)
• Two-factor authentication (TOTP)
• Role-based access controls
• Regular security audits and penetration testing
• Encrypted storage of sensitive credentials

10. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards through Standard Contractual Clauses and compliance with applicable data transfer regulations.

11. Cookies

We use essential cookies for authentication and session management. Analytics cookies are only loaded with your consent. You can manage cookie preferences through the consent banner.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices

13. Children's Privacy

WebGuarder is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our website. Continued use after changes constitutes acceptance.

15. Contact Us

For privacy-related questions or to exercise your rights: