1. Who we are
Prozen Technologies OPC Pvt Ltd, operates Web Compliance Suite. For data about our customers and visitors we are the controller. For data inside your workspace about your own sites and users, we are your processor; see the Data Processing Addendum. Privacy contact: privacy@webcompsuite.com.
2. What we collect
- Account data: name, e-mail address, sign-in method (password hash, Google or GitHub identity, single sign-on), two-step verification settings, workspace memberships and roles.
- Workspace data: projects, site addresses, scan settings, scan results, findings, notes, reports, evidence screenshots, integrations you connect, and API keys (stored as hashes).
- Credentials you provide for signed-in scans or integrations. These are stored encrypted and never shown again.
- Billing data: plan, status and invoices. Card details are handled by our payment provider; we do not receive or store card numbers.
- Technical data: IP address, browser, device, request logs, and security events, used to keep the Service safe and working.
- Messages you send us through the contact form or e-mail.
- Content of scanned pages is processed to produce findings. We do not intentionally collect personal data from visitors to your sites; where a page shows some, it may appear in evidence you can delete.
3. How we use it, and the legal basis
- To provide the Service you asked for: run scans, show results, send reports, process billing (contract).
- To secure the Service and prevent abuse: rate limiting, audit logs, fraud checks (legitimate interests).
- To communicate: account and security notices, scan digests you enable, replies to your messages (contract, legitimate interests). Optional product news only where you agree, with unsubscribe in every message.
- To improve the Service using aggregated, de-identified usage (legitimate interests).
- To meet legal obligations such as tax records (legal obligation).
5. International transfers
Our providers operate in several countries, so data may be processed outside yours. Where the law requires, we rely on safeguards such as standard contractual clauses with those providers.
6. How long we keep it
- Account and workspace data: while your account is open. After closure it is deleted from live systems within 30 days and from backups within a further 35 days.
- Scan history and evidence: according to your plan's history window, or until you delete it.
- Audit logs: for the period your plan provides.
- Billing records: as long as tax and accounting law requires.
- Security and request logs: for a short, limited period.
7. Your rights
Depending on where you live (including under India\'s Digital Personal Data Protection Act, the GDPR and similar laws) you may have the right to access, correct, delete or export your data, to object to or restrict some processing, to withdraw consent, and to complain to a regulator.
Most of this you can do yourself in the product (export, delete a project, close your account). For anything else, write to privacy@webcompsuite.com. We will answer within 30 days. If you are a member of a customer's workspace, the workspace owner may be the right first contact.
8. Security
We protect data with encryption in transit and at rest, workspace isolation, role-based access and audit logging, described on the Security page. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authorities as the law requires.
10. Children
The Service is for businesses and is not directed at anyone under 18. If you believe a child has given us data, contact us and we will delete it.
11. Changes
If we change this policy in a material way we will notify you by e-mail or in the product before the change takes effect. The date above shows the latest revision.