Privacy Policy

This policy describes how SurfaceSentinel collects and uses information when you use the service.

Information Collected

We may collect:

• domains submitted for analysis
• user account information
• email addresses
• billing information through payment processors
• scan results generated by the platform.

Use of Information

Collected information is used to:

• generate security analysis reports
• operate and improve the platform
• communicate with users
• provide customer support.

What We Do Not Store

SurfaceSentinel analyses only publicly observable signals — DNS records, TLS configuration, HTTP headers, and related infrastructure data. No credentials, private network data, or internal system information is requested or retained. Scan results are stored to support report delivery and may be retained for a limited period for service improvement.

Data Storage

Scan results are retained for a limited period to support report delivery and service improvement. Billing records are retained as required by Stripe and applicable law.

Third-Party Services

Payment processing and hosting infrastructure may be provided by third-party services such as Stripe or cloud hosting providers.

Data Security

Reasonable administrative and technical safeguards are used to protect stored data.

User Responsibility

Users are responsible for ensuring they have authorization to analyze any domain submitted.

Changes

This policy may be updated periodically. Continued use of the service constitutes acceptance of the current policy.

Contact

For privacy-related enquiries contact support@arcforgelabs.com.