Privacy Policy
Effective Date: April 24, 2026
Provider: Vision Tech Solutions ("we", "us", "Alpha Audit")
1. Data We Collect
Account Data
Name, email address, company name, and billing information (processed by Stripe — we do not store card numbers).
Infrastructure Data
IP addresses, hostnames, SSH public keys, container metadata, package lists, OS versions, and TLS certificate details from your designated scan targets.
Scan Results
Vulnerability findings, compliance control mappings, configuration drift records, and security posture scores.
Usage Data
API call logs, scan timestamps, and aggregated platform analytics. We use privacy-respecting analytics (Plausible) with no personal tracking cookies.
2. How We Use Your Data
- Perform vulnerability scans and compliance assessments on your targets
- Generate security reports and posture summaries
- Send scan alerts and monthly reports via email or Slack
- Process billing through Stripe
- Improve our scanning engine and detection capabilities (using anonymized, aggregated data only)
3. Data Storage & Security
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Infrastructure is hosted on dedicated servers. Scan results are stored for the duration of your subscription plus 90 days. Backups are encrypted and retained for 30 days.
4. Data Sharing
We do not sell your data. We share data only with:
- Stripe — payment processing
- Email provider — transactional emails (scan alerts, reports)
- Anonymized threat intelligence — aggregated vulnerability trends shared with the security community (no identifying data)
5. Your Rights
- Access — request a copy of your data at any time
- Deletion — request deletion of your account and all associated data
- Export — download your scan results in JSON or PDF format
- Correction — update your account information at any time
6. Cookies
We use only essential cookies for session management and theme preference. No tracking cookies, no third-party ad cookies. See our Cookie Policy for details.
7. Data Retention
Active accounts: data retained for subscription duration. Cancelled accounts: data retained for 90 days, then permanently deleted. You may request immediate deletion at any time.
8. Children
Alpha Audit is not directed at individuals under 18. We do not knowingly collect data from minors.
9. Changes
We will notify you of material changes via email at least 30 days before they take effect.
10. Contact
Privacy inquiries: privacy@alphaaudit.ai