Privacy Policy

Effective Date: 30/03/2025

At NotSecure, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data when you use our website, services, including the APTE Engine (via API, dashboard, or offline deployment), and any other interactions with NotSecure.

1. Information We Collect

1.1 Personal Information

• Name, email address, phone number, and company details (when you contact us or request services)
• Billing and payment details (when purchasing our services or credits)

1.2 Technical Information

• IP address, browser type, operating system, and device details
• Cookies and tracking technologies to improve user experience
• Log files containing access details, timestamps, and service interactions

1.3 Security Testing & APTE Engine Usage

• When you use APTE Engine (via API, dashboard, or offline), we may process data related to your IT infrastructure, applications, API requests, and identified vulnerabilities.
• Offline Mode: If you deploy APTE Engine on-premises or in an air‑gapped environment, no data leaves your infrastructure. NotSecure has no access to that data.
• Cloud/API Mode: If you use our cloud or API services, we may temporarily process your data to perform the security assessment. We do not store sensitive client data beyond the duration of the engagement unless required for compliance or as explicitly agreed.
• Dashboard: When you use dashboard.notsecure.in, we collect account information (email, password hash), usage logs, and billing details.

2. How We Use Your Information

We use the collected data to:

• Provide, operate, and improve our cybersecurity services, including APTE Engine
• Respond to inquiries and communicate about our services
• Conduct security testing, risk assessments, and audits
• Maintain website functionality, performance, and analytics
• Process payments and manage credits/subscriptions
• Prevent fraud, security threats, or unauthorized access
• Comply with legal obligations and regulatory requirements

3. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to:

• Improve website functionality and user experience
• Analyze website traffic and user behavior
• Enable marketing and retargeting campaigns

You can control cookie settings in your browser. Disabling cookies may affect some website functionalities.

4. How We Protect Your Information

Security Measures:

We implement strong security measures, including encryption, firewalls, and access controls, to protect your data from unauthorized access, loss, or disclosure.

Data Retention:

• We retain personal data only as long as necessary for business and legal purposes
• Security testing data is deleted upon project completion unless agreed otherwise
• API and dashboard logs may be retained for a limited period for audit and security purposes

5. How We Share Your Information

We do not sell, trade, or rent personal data. However, we may share data in the following cases:

• With trusted third-party service providers (e.g., payment processors, analytics tools) who assist in delivering our services
• When required by law (e.g., court orders, law enforcement requests)
• To protect our legal rights and prevent fraud or cyber threats

6. Third-Party Links & External Services

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing any personal data.

APTE Engine may optionally integrate with third-party LLM services (e.g., DeepSeek API) if configured by you. In such cases, data sent to those services is subject to their respective privacy policies. We recommend using local/offline models for maximum privacy.

7. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain data processing activities
• Withdraw consent for marketing communications

To exercise these rights, contact us at: support@notsecure.in

8. Compliance with Global Privacy Laws

We comply with major data protection laws, including:

• GDPR (General Data Protection Regulation) – Applicable to users in the EU
• CCPA (California Consumer Privacy Act) – Applicable to California residents
• IT Act, 2000 (India) – Governing cybersecurity and data privacy regulations

9. Children's Privacy

Our services are not intended for individuals under 18 years old. We do not knowingly collect data from minors.

10. Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be available on our website, with the effective date mentioned at the top.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

Email: support@notsecure.in