Privacy Policy

Last updated: July 12, 2026

This Privacy Policy explains what information RapidVuln ("we," "us," "our") collects when you use our website security scanning service (the "Service"), and how we use it.

1. What We Collect

Data	When	Why
Website/domain you submit	When you run a scan	To run the scan and generate your report
Name, email, business name	When you request a report be emailed to you	To deliver the report and identify who it belongs to
Payment details	When you subscribe to a paid plan	To process billing — handled directly by our payment processor (Stripe); we do not store your card details ourselves
Basic usage/technical data (IP address, browser type)	Automatically, when you use the site	Security, abuse prevention, and troubleshooting

2. How We Use Scan Results

Scan reports are generated for the domain you submitted and are only made available to you (via the email address you provided, or immediately on-screen for a one-time free scan). We don't publish, sell, or share the contents of an individual scan report with anyone else.

3. Third Parties We Use

Stripe — processes payments for paid subscriptions. Stripe has its own privacy policy governing payment data.
NVD (National Vulnerability Database) — we query NVD's public API to check detected software versions against known vulnerabilities. We only send generic product/version strings, never anything identifying you or the site's owner.
Hosting/infrastructure providers that run the Service.

We do not sell your personal information to anyone.

4. Data Retention

We retain scan results and associated contact info for as long as needed to provide the Service (for example, so a monitoring subscription can compare against prior scans) or as required by law. You can request deletion at any time — see Section 6.

5. Security

We take reasonable measures to protect the data we hold, but no method of storage or transmission is 100% secure, and we can't guarantee absolute security.

6. Your Rights

You can request access to, correction of, or deletion of your personal data by contacting us at [support/contact email]. Depending on where you're located, you may have additional rights under laws like the CCPA or GDPR.

7. Children's Privacy

The Service is intended for business use and is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about this policy: [support/contact email]

This document is a starting draft based on what the Service actually collects and does today — it has not been reviewed by a lawyer. Have an attorney confirm it matches your actual data practices (especially once payments are live and you know your real customer base/jurisdictions), and fill in the contact placeholder above, before relying on it for a paid product.