Privacy Policy
Last updated: April 23, 2026
1. Introduction
VulnRemote ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vulnerability management platform.
2. Information We Collect
We collect information that you provide directly to us, including:
- Account Information: Name, email address, company name, and password when you register
- Profile Information: Job title, department, and contact preferences
- Usage Data: Information about how you interact with our Service
- Vulnerability Data: Security findings and related metadata you upload or create
- Communication Data: Messages, comments, and feedback you send to us
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process transactions and send related information
- Send technical notices, updates, and security alerts
- Respond to your comments, questions, and support requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and abuse
4. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With Your Consent: When you explicitly authorize us to share information
- Service Providers: With trusted third parties who assist in operating our Service
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5. Data Security
We implement industry-standard security measures to protect your data, including:
- 256-bit TLS encryption for data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- Secure data centers with SOC 2 compliance
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
7. Your Rights
Depending on your location, you may have the following rights:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request data portability
- Withdraw consent at any time
8. Cookies and Tracking
We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookie preferences through your browser settings. Essential cookies required for the Service to function cannot be disabled.
9. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].