Privacy Notice

1. Who we are

ScorpSoft Solutions (“ScorpSoft”, “we”) is the data controller for personal data processed through ScorpSoft Shield. Contact: info@scorpsoftsolutions.com.

2. Data we collect

• Account data — name, email, hashed password, organisation, avatar.
• Scan data — target URLs and hostnames you submit, findings we generate, notes and schedules you configure.
• Usage & telemetry — IP address, device/browser metadata, feature usage, error logs.
• Support & communications — messages you send us and lead-form submissions.
• Billing metadata — subscription status, plan and Paddle customer/subscription IDs. Full payment details (card number, billing address) are collected and stored by Paddle, not by us.

3. How we use it

• Provide, maintain and improve the Service.
• Authenticate you and secure your account.
• Run the scans you request and generate reports.
• Send transactional email (scan completion, receipts, security alerts).
• Prevent abuse, fraud and violations of our Acceptable Use policy.
• Meet legal, tax and accounting obligations.

4. Legal bases

We rely on performance of a contract to deliver the Service to you, legitimate interests to secure and improve the Service, legal obligation for tax and record-keeping, and consent where required (e.g. non-essential cookies, marketing email).

5. Who we share data with

• Paddle — our Merchant of Record. Paddle handles checkout, subscriptions, payments, tax compliance and invoicing.
• Infrastructure providers — hosting, database, email and error-monitoring subprocessors that operate under written data-processing terms.
• Professional advisers — legal, accounting and audit firms as needed.
• Authorities — where required by law or to protect the rights, property or safety of ScorpSoft, our users or the public.

We do not sell personal data.

6. International transfers

Where personal data is transferred outside your region we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Retention

We retain account data for the life of your account plus a limited period afterwards, scan data for as long as you keep it in your dashboard, and billing records for the period required by tax and accounting law. You can delete scans at any time; deleting your account removes personal data except records we are legally required to keep.

8. Your rights

Subject to local law you may have the right to access, rectify, delete, restrict or object to processing of your personal data, to withdraw consent, and to data portability. To exercise these rights email info@scorpsoftsolutions.com. If you are in the EEA or UK you may also complain to your local supervisory authority.

9. Security

We apply appropriate technical and organisational measures — encryption in transit, hashed credentials, least-privilege access, role-based permissions, audit logging — to protect personal data. No system is perfectly secure and we cannot guarantee absolute security.

10. Cookies

We use essential cookies to keep you signed in and secure your session, and anonymous analytics to understand how the Service is used. You can control cookies through your browser settings.

11. Changes to this notice

We will post any updates on this page and, if the change is material, notify you by email or in-app.