Privacy Policy
Last Updated: July 21, 2026 | Sceawere Security Labs Data Governance
1. Information We Collect
At Sceawere Security Labs ("Sceawere", "we", "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, and safeguard information when you use our vulnerability intelligence platform.
Account Data
Email address, authentication tokens (handled securely via Clerk), account preferences, and vendor asset selections.
Technical Telemetry
IP address, browser type, device metadata, time zone, and interaction logs for system diagnostic and rate-limiting security.
2. Payment Data & Merchant of Record
Sceawere does NOT collect, store, or process full credit card numbers, CVVs, or sensitive payment details directly on our servers.
All payment transactions, billing inquiries, tax obligations, and order fulfillment are handled by our authorized Merchant of Record partners, including Paddle and Lemon Squeezy. Payment data is transmitted using encrypted PCI-DSS Level 1 compliant standards directly to the Merchant of Record.
3. Third-Party Service Processors
We share data only with verified sub-processors necessary to operate Sceawere services:
4. Your Data Subject Rights (GDPR & CCPA)
Regardless of your geographical location, Sceawere accords you full control over your personal data:
- Right to Access: Request a full copy of the personal data we store about your account.
- Right to Erasure ("Right to be Forgotten"): Delete your account and associated asset preferences at any time.
- Right to Rectification: Update inaccurate or incomplete account details.
- Right to Object/Opt-Out: Opt out of optional non-essential communications or cookie analytics.
5. Cookies & Tracking Technologies
We use functional session cookies to remember theme preferences and maintain security sessions. For more details on cookie categories and opt-out choices, please read our dedicated Cookie Policy.
Data Protection & Privacy Contact
For privacy-related inquiries, data erasure requests, or compliance questions, please contact our Data Protection Office: