Privacy Policy — SecurityStatus

SecurityStatus is operated by Cyberneticsplus Services Private Limited (a Vaarin Group company), India. This policy explains what we collect, why, who we share it with, and how you stay in control.

1. Who we are

SecurityStatus ("the Service", "we", "us") is a passive, non-intrusive domain security scanner operated by Cyberneticsplus Services Private Limited, Kokarya Business Synergy Center, 2nd Floor, Jayanagar 9th Block, Bengaluru, Karnataka — 560041, India. For any privacy question, contact us at [email protected].

2. Data we collect

Account data: your business email address and a securely hashed password. Your email's domain is detected and used as your account's verified domain.
Scan data: the domain(s) you scan and the results and history of those scans (security grade, findings, remediation).
Billing data: for paid plans, transaction records processed by our payment provider. We do not store your card details.
Usage & device data: standard analytics such as pages visited, approximate location, browser and device type, collected via cookies to improve the product.

Our scans read only publicly available information about a domain (DNS records, TLS certificates, HTTP response headers, exposed services). We do not perform intrusive testing.

3. How we use it

To run scans and deliver your security score, findings, and reports.
To create and manage your account and verify domain ownership.
To process payments and provide paid-plan features.
To send transactional email (verification, results, alerts) and, where you opt in, product updates.
To understand product usage and improve the Service.

4. Third parties we share with

We use a small number of trusted processors, each handling only the data needed for their function:

Razorpay — payment processing.
ZeptoMail — transactional email delivery.
Google Analytics 4 / Google Tag Manager — product and website analytics.
Cloudflare — hosting, content delivery, and security.

We do not sell your personal data, and we do not share it for third-party advertising.

5. Data retention

We keep account and scan data for as long as your account is active. When you delete your account, we remove your personal data within 90 days, retaining only what we are legally required to keep (e.g. billing records for tax compliance).

6. Your rights

You can access, correct, export, or delete your personal data at any time. Email [email protected] and we will respond within a reasonable period. You can also delete your account from your dashboard.

7. Cookies

We use essential cookies to keep you signed in and analytics cookies (via Google Tag Manager) to understand usage. You can control cookies through your browser settings.

8. Security

Passwords are hashed, data is encrypted in transit (TLS), and access is restricted. As a security company, protecting your data is core to what we do.

9. Changes

We may update this policy; material changes will be reflected in the "Last updated" date above. Continued use of the Service after an update constitutes acceptance.