Privacy Policy

1. Information we collect

• Account information: your name, email address, authentication details, and account preferences.
• Service and scan data: website URLs you submit, scan results, security reports, timestamps, and technical data collected to provide the service.
• Payment information: payment reference, plan, amount, currency, and payment status needed to manage subscriptions. Paynow processes payment credentials; Pentesterr does not store card details.
• Security and technical data: device, browser, IP, and log information used to operate the service, prevent abuse, and investigate security incidents.

2. How we use information

• Provide, secure, maintain, and improve Pentesterr services.
• Process payments, activate subscriptions, issue receipts, and provide support.
• Send service, security, renewal, and account communications.
• Prevent fraud, abuse, unauthorised access, and attacks against the platform.
• Comply with legal, accounting, and regulatory obligations.

3. Optional Google Ads conversion measurement

If you choose to allow optional Google Ads measurement through our cookie banner, Pentesterr uses Google Consent Mode v2 and the Google tag to measure whether an ad interaction leads to a verified Paynow purchase. We send the completed purchase value, USD currency, and a unique order or payment reference for deduplication. We do not send payment card details, passwords, or scan findings to Google Ads.

Optional Google Ads measurement is off by default. You can accept, reject, or later change this choice through Cookie Settings in the footer. Pentesterr does not display third-party advertising.

4. How we share information

We do not sell personal information. We may share information only with service providers that help us run the service and subject to appropriate safeguards, including:

• Paynow for payment processing you initiate.
• Resend for transactional email delivery.
• Railway for hosting and infrastructure.
• Google reCAPTCHA for bot and abuse prevention.
• Google Ads only if you opt in to optional conversion measurement.

5. Cookies and similar technologies

We use essential cookies and local storage to maintain secure sessions and remember privacy choices. Optional Google Ads technologies are used only after consent. For the cookie categories, technologies, durations, and settings controls, please read our Cookie Policy.

6. Data retention

• Account information is retained while your account is active and as reasonably necessary afterward.
• Payment records are retained for the period required by applicable accounting or tax obligations.
• Security logs and scan data are retained only as long as reasonably needed to provide, secure, and improve the service.

7. Your choices and rights

Subject to applicable law, you may ask to access, correct, delete, or export personal information, object to certain processing, or opt out of marketing communications. You may also withdraw optional Google Ads measurement consent at any time through Cookie Settings. Contact us through the contact page to make a request.

8. Security

We use reasonable administrative, technical, and organisational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy as our services or legal obligations change. We will post an updated version here and revise the date above. Where required, we will provide additional notice or request a refreshed consent choice.