Privacy Policy

We collect only the information necessary to provide, secure, improve, and bill for the Splorix service.

Information you provide directly may include your email address, your name or company name if provided, account credentials and authentication-related information, workspace organization or team information, billing and subscription information, and support messages and communications you send to us.

Information related to your use of Splorix may include domains, subdomains, APIs, IP addresses, ports, services, and other assets that you submit or authorize Splorix to monitor, along with scan configurations, monitoring preferences, scan results, vulnerability findings, technical evidence, remediation guidance, screenshots, metadata, reports, notification settings, account preferences, and usage data related to features used within the platform.

Technical and security information may include IP addresses used to access Splorix, device, browser, and operating system information, login timestamps and authentication events, security logs, audit logs, error logs, and actions performed inside the platform where necessary for security, fraud prevention, debugging, or compliance.

Payment information is processed by Stripe. We do not store full credit card numbers or sensitive payment card details on our servers.

We use the information we collect to provide and improve Splorix.

We may also use your email address to send product updates, feature announcements, newsletters, tips, and marketing communications. You can unsubscribe from marketing emails at any time using the unsubscribe link included in those emails or by contacting us at contact@splorix.com.

Even if you unsubscribe from marketing emails, you may still receive essential service-related communications about your account, subscription, billing, security, or use of the platform.

Splorix is designed to help users monitor their external attack surface. To provide this service, we may process technical data related to domains, subdomains, APIs, IP addresses, ports, exposed services, SSL certificates, Whois records, vulnerabilities, and other security-related information.

You are responsible for ensuring that you only submit assets that you own or are authorized to assess.

We use asset and scan data only to provide the Splorix service, improve platform functionality, secure the service, troubleshoot issues, and comply with applicable legal obligations.

We do not sell your asset data, scan results, vulnerability findings, or reports.

We do not sell your personal data.

We may share limited information with trusted third-party service providers only when necessary to operate Splorix.

These providers are only allowed to process information as necessary to provide services to us and are not permitted to use your information for their own unrelated purposes.

We may also disclose information if required to do so by law, court order, legal process, regulatory request, or to protect the rights, safety, and security of Splorix, our users, or others.

Payments are processed securely by Stripe.

When you subscribe to Splorix, purchase paid domain slots, start a trial, or make any other payment, your payment information is handled by Stripe according to Stripe's own terms and privacy policy.

We do not store full credit card numbers, CVC codes, or sensitive payment card details.

We retain personal data and service data only for as long as necessary to provide Splorix, comply with legal obligations, resolve disputes, enforce our agreements, prevent abuse, and maintain platform security.

Account data may be retained while your account is active.

After cancellation or account deletion, we may retain some data for a limited period for backup, billing, tax, legal, fraud prevention, security, and operational purposes.

Scan results, reports, domains, findings, and related technical data may be deleted after account closure, subscription cancellation, or a defined retention period, unless we are required or permitted to retain them for legitimate business, legal, or security reasons.

We implement reasonable technical and organizational measures to protect your information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

Depending on your location and applicable law, you may have certain rights regarding your personal data.

You can exercise these rights by contacting us at contact@splorix.com.

We may need to verify your identity before responding to certain requests.

Please note that some data may be retained where necessary for legal, billing, tax, fraud prevention, security, or legitimate business purposes.

Users can access their account information, monitored assets, scan history, vulnerability findings, and reports through the Splorix platform while their account and subscription remain active.

We recommend exporting any reports, findings, or data you wish to keep before canceling your subscription or deleting your account.

After account deletion or the end of the applicable retention period, data may be permanently deleted and may not be recoverable.

Splorix may use cookies or similar technologies to operate the website and platform.

If we use analytics or tracking tools, we will use them in accordance with applicable privacy laws and, where required, obtain consent.

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the service.

Splorix may rely on third-party services to operate the platform, process payments, send emails, host infrastructure, monitor errors, provide customer support, and maintain security.

These third-party services may process limited data on our behalf.

We are not responsible for the privacy practices of third-party websites or services that are not controlled by Splorix. We encourage you to review the privacy policies of any third-party services you interact with.

Depending on the location of our service providers and infrastructure, your information may be processed or stored in countries other than your country of residence.

Where required by applicable law, we take appropriate measures to protect personal data transferred internationally, including relying on contractual safeguards or other lawful transfer mechanisms.

Splorix is not intended for children under the age of 18.

We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us at contact@splorix.com and we will take appropriate steps to delete such information.

Because Splorix is a security-focused platform, we may process technical and security-related data to detect unauthorized activity, abuse, fraud, misuse, or violations of our Terms and Conditions.

We may retain security logs and investigation records where necessary to protect the service, our users, and third parties.

Users must only submit assets they own or are authorized to monitor. Unauthorized scanning, testing, or misuse of Splorix is prohibited.

We may update this Privacy Policy from time to time.

The most current version will be posted on our website with the date of the last update.

If we make material changes, we may notify users by email, through the platform, or by another appropriate method.

Your continued use of Splorix after changes become effective means that you accept the updated Privacy Policy.

If you have any questions, concerns, requests, or complaints about this Privacy Policy or how your data is handled, please contact us at contact@splorix.com.