Privacy Policy

Privacy Policy

Introduction

This Privacy Policy explains how Shadops uses and protects the personal data we collect from you when you use our security scanning and analysis platform.

What data do we collect?

Shadops collects the following categories of data:

Personal information

  • Email address
  • Name
  • IP address
  • Browser user agent

Technical data

  • Scan targets and configurations
  • Scan results and findings
  • Network information discovered during scans
  • Target specifications and metadata

Usage data

  • Account activity and scan history
  • Service usage patterns
  • Error logs and diagnostic information

How do we collect your data?

You directly provide Shadops with data when you:

  • Register and create an account
  • Add scan targets
  • Configure and run scans
  • Use AI-powered reporting features
  • Contact our support ([email protected])

Shadops also collects data automatically when you:

  • Access our website and platform
  • Use our scanning services
  • Interact with scan reports and results

How will we use your data?

Shadops uses your data exclusively to:

  1. Provide our security scanning service - Enable you to conduct security assessments and manage your targets
  2. Generate AI-powered analysis reports - When you request AI analysis, we send minimal necessary scan data to our AI provider (DeepSeek) to generate security recommendations and reports
  3. Improve our service - Analyze usage patterns to enhance platform functionality and troubleshoot technical issues
  4. Customer support - Respond to your inquiries and provide technical assistance
  5. Legal compliance - Comply with applicable laws and respond to valid legal requests

AI processing and data sharing

AI analysis reports: When you request an AI-powered security report, Shadops sends scan results and context to DeepSeek (our AI provider) via their secure API. This is the only circumstance where your scan data is sent to an external service.

  • The AI processing is conducted under strict confidentiality
  • No personal information beyond scan data is shared
  • All AI communication is encrypted in transit
  • AI providers are contractually prohibited from using your data for training or any other purpose

Data storage and retention

Storage location

Your data is stored on secure infrastructure in Europe, but scan informations can transit across different country, (Email, target) but encrypted in transit.

Retention policy

Scan data is automatically deleted after 30 days from the completion date. This includes:

  • Scan results
  • Port information
  • Network discovery data
  • All associated technical findings

You can manually delete scan data at any time through the dashboard. Account information is retained while your account is active and may be retained for a reasonable period after account termination for legal compliance purposes.

Security measures

Shadops implements comprehensive security controls:

  • Encryption in transit: All data transmitted to and from our platform uses TLS 1.3 encryption
  • Encryption at rest: All stored data is encrypted using industry-standard encryption
  • Access controls: Strict access control lists and minimal necessary permissions
  • Network security: Firewall rules and network segmentation
  • Regular security monitoring: Continuous vulnerability scanning and immediate remediation
  • Security audits: Regular reviews of security practices and procedures

Third-party service providers

We use the following third-party services to operate Shadops:

  1. DeepSeek AI - For AI-powered security analysis reports (only when you request AI analysis)
  2. Cloud infrastructure providers - For hosting our scanning infrastructure
  3. Email service - For transactional and support emails

All third-party providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than providing services to Shadops.

Data protection rights

Under applicable data protection laws, including GDPR, you have the right to:

  • Right to access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate information
  • Right to erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to restrict processing: Request limitation of how we use your data
  • Right to object: Object to processing of your personal data
  • Right to data portability: Request transfer of your data to another service
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at: [email protected]

We will respond to your request within 30 days.

Do we sell your data?

No. Shadops never sells your data to third parties.

We do not sell, rent, trade, or share your personal information or scan results with any third party for their marketing or commercial purposes.

Cookies and tracking

Shadops uses cookies to:

  • Maintain your session and authentication state
  • Remember your preferences
  • Analyze website usage to improve service

You can configure your browser to refuse cookies, though some platform features may not function properly without them.

Data breach notification

In the unlikely event of a data breach that may affect your personal data, Shadops will:

  • Notify affected users within 72 hours of discovery
  • Provide details of the incident and potential impacts
  • Outline remedial actions taken
  • Comply with all applicable breach notification requirements

Children's privacy

Shadops does not knowingly collect data from children under 13 years of age. If you are under 13, please do not provide any information to us. If we become aware that we have collected information from a child under 13, we will delete such information immediately.

Changes to this privacy policy

Shadops may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Last updated: January 2025

Disclaimer and limitation of liability

Shadops makes no warranties or representations regarding the security, accuracy, or completeness of any scan results or data provided through the Service.

  • Scan results are provided for informational purposes only
  • Shadops is not responsible for any security incidents, vulnerabilities, or unauthorized access discovered through scans
  • We do not guarantee the accuracy or completeness of scan data
  • You use the Service at your own risk
  • Shadops shall not be liable for any indirect, incidental, consequential, or punitive damages arising from the use of the Service

Contact us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your data protection rights, please contact us:

Email: [email protected]

We will respond to all inquiries promptly and within applicable legal timeframes.