Privacy Policy

Last updated: March 18, 2026

1. Information We Collect

Account Data: When you sign up, we collect your name, email address, and a hashed password via Firebase Authentication. We do not store raw passwords.

Scan Data: Targets you scan, scan results, and findings are stored to display your dashboard and history. Scan targets must be systems you own or have written authorization to test.

Usage Data: We collect basic request logs (timestamps, IP addresses) for security monitoring and rate limiting. We do not use third-party analytics or tracking pixels.

2. How We Use Your Data

  • Authenticate you and manage your session
  • Run security scans you request and display results
  • Provide AI-powered analysis of your scan findings
  • Detect abuse and enforce rate limits
  • Improve the reliability and security of our service

3. Data Storage & Security

Data is stored in Google Cloud Firestore with encryption at rest and in transit. Session tokens are cryptographically signed with time-limited expiry (7 days). Cookies are marked HttpOnly and Secure in production.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. Data may be disclosed only if required by law or to protect the security of our service.

5. Data Retention & Deletion

Scan results are retained while your account is active. You may request deletion of your account and all associated data by contacting ee1912136@gmail.com. We will process deletion requests within 30 days.

6. Cookies

We use a single session cookie (rs_session) to keep you logged in. We do not use advertising or tracking cookies.

7. Your Rights

You have the right to access, correct, or delete your personal data. If you are located in the EU/EEA, you may exercise your rights under the GDPR by contacting us. We will respond within 30 days.

8. Children's Privacy

RedSec AI is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be noted on this page with an updated revision date. Continued use of RedSec AI after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, contact ee1912136@gmail.com.