privacy policy

1. introduction

Sekura AI (“Sekura,” “we,” “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard information when you use our website and managed scan services.

2. information we collect

Account information: Name, work email address, company name, job title, and company size provided through our intake and managed scan forms.

Cloud configuration: Cloud provider, region, account identifiers, network configuration, and scan target CIDRs submitted for scan provisioning.

Scan metadata: Scan start/end times, finding counts and severities, target CIDR ranges, and scanner health metrics.

Usage data: Pages visited, form interactions, and browser/device information collected automatically via standard web technologies.

3. how we use your information

We use collected information to:

• Provision and operate scanner infrastructure in your cloud environment
• Generate scan authorization documents
• Send scan status notifications and reports
• Respond to your inquiries and support requests
• Improve our services and develop new features
• Comply with legal obligations

4. data sharing

We do not sell your personal information. We may share information with:

• Service providers: Email delivery (Resend), cloud infrastructure (Cloudflare), and document management (Google Workspace) providers that process data on our behalf.
• Legal requirements: When required by law, regulation, or legal process.

5. scan data

Vulnerability findings and scan results remain within your cloud environment. Sekura does not extract, store, or transmit customer application data, credentials, or proprietary information discovered during scans. Only scan metadata (timing, finding counts, severity distributions) is retained by Sekura for service operations.

6. data retention

Account and scan metadata are retained for 90 days after the last scan engagement. You may request deletion of your data at any time by contacting privacy@sekura.ai.

7. security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, access controls, and regular security assessments of our own infrastructure.

8. your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to opt out of certain processing activities. To exercise these rights, contact privacy@sekura.ai.

9. cookies

Our website uses only essential cookies required for site functionality. We do not use advertising or tracking cookies.

10. changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website.

11. contact

For privacy-related inquiries, contact privacy@sekura.ai.