Privacy Policy

Security Audit AI Agent ("we", "us", "our", or the "Service"), a service operated by THETECHBRAIN LTD, is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have in relation to it when you visit https://securityaudit.dev/ (the "Site") or use any of our services (collectively, the "Services").

Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services.

1. Who We Are and How to Contact Us

THETECHBRAIN LTD is the data controller responsible for your personal data. You can reach us at:

• Email: legal@visionvix.com
• Website: https://securityaudit.dev/
• Address: 20 Wenlock Road , London ,N1 7GU, United Kingdom

If you are located in the European Economic Area (EEA) or United Kingdom, THETECHBRAIN LTD is the data controller under the General Data Protection Regulation (GDPR) and UK GDPR respectively.

2. Information We Collect

We collect information in three ways: information you give us directly, information collected automatically, and information from third parties.

2.1 Information You Provide Directly

• Contact and communication data: name, email address, phone number, and any message content when you contact us via forms, email, or live chat
• Account registration data: username, password (hashed and salted, never stored in plain text), and profile information
• Transaction data: billing name, billing address, and purchase history (payment card details are processed by our payment provider and never stored by us)
• User-generated content: any content, files, or data you upload or submit through the Services
• Survey and feedback data: responses to any surveys, ratings, or feedback requests

2.2 Information Collected Automatically

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visit, and time spent on pages
• Device data: device identifiers, device type, screen resolution, and language settings
• Usage data: features used, search queries, click patterns, and navigation paths within the Services
• Cookie and tracking data: see Section 6 (Cookies) for full details

2.3 Information from Third Parties

• Analytics providers: aggregated usage statistics from services such as Google Analytics
• Social media platforms: if you connect a social account or interact with our social content
• Payment processors: confirmation of payment status (we never receive your full card number)

2a. AI Inputs & Automated Processing

When you use our AI features, we process the prompts, instructions, and content you provide ("Inputs") in order to generate text ("Outputs"). Your Inputs may be used to improve our AI models. You can opt out at any time in your account settings.

THETECHBRAIN LTD uses third-party to power its AI features. Your Inputs may be transmitted to third-party's servers to generate outputs and are subject to third-party's data processing terms in addition to ours.

AI outputs are generated and delivered to you fully automatically without human review before delivery.

• Inputs are processed solely for the purpose of generating your requested Output
• We do not sell your Inputs or Outputs to third parties
• Inputs containing personal data of third parties are processed under your instructions as data controller

2b. EU AI Act & Automated Decision-Making

THETECHBRAIN LTD operates as an AI system provider under Regulation (EU) 2024/1689 (the "EU AI Act"). Our AI tool is classified as a limited-risk AI system under the Act, subject to transparency obligations.

In accordance with the EU AI Act and Article 22 of the GDPR:

• Transparency: You are informed that you are interacting with an AI system. Outputs are AI-generated and not the result of human authorship
• Human oversight: AI outputs are generated and delivered to you fully automatically without human review before delivery. Where outputs affect significant decisions, you retain the right to request human review by contacting us at legal@visionvix.com
• Right to object: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Contact us to exercise this right
• AI literacy: We are committed to ensuring our users understand how our AI works. See our Help section for documentation on how outputs are generated

For questions about our AI Act compliance, contact us at legal@visionvix.com.

3. Legal Basis for Processing (EEA / UK Users)

If you are located in the EEA or UK, we process your personal data under the following legal bases:

• Contract performance (Article 6(1)(b) GDPR): Processing necessary to deliver the Services you have requested or to fulfil a contract with you
• Legitimate interests (Article 6(1)(f) GDPR): Processing necessary for our legitimate business interests, such as improving our Services, preventing fraud, and ensuring security — provided these interests are not overridden by your rights
• Legal obligation (Article 6(1)(c) GDPR): Processing required to comply with applicable law
• Consent (Article 6(1)(a) GDPR): Where you have given clear consent, such as for marketing emails or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing

4. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: to provide, operate, maintain, and improve the Services and to fulfil your requests
• Account management: to create and manage your account, authenticate your identity, and maintain account security
• Communications: to respond to your enquiries, send service notices, security alerts, and support messages
• Marketing: to send you promotional communications about our products and services where you have consented or where we have a legitimate interest — you may opt out at any time
• Analytics and improvement: to understand how our Services are used, diagnose technical issues, and improve functionality and user experience
• Personalisation: to tailor content, recommendations, and features to your preferences
• Safety and security: to detect, investigate, and prevent fraudulent, unauthorised, or illegal activity and to protect the rights of THETECHBRAIN LTD and our users
• Legal compliance: to comply with applicable laws, regulations, and legal processes, and to enforce our Terms of Service

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service providers: We share data with trusted third-party vendors who perform services on our behalf (hosting, analytics, payment processing, email delivery, customer support tools). These providers are contractually obligated to protect your data and may not use it for their own purposes.
• Business transfers: If THETECHBRAIN LTD is involved in a merger, acquisition, asset sale, or bankruptcy, your data may be transferred as part of that transaction. We will notify you via email or prominent notice on our Site before your data is transferred and becomes subject to a different privacy policy.
• Legal requirements: We may disclose your information if required to do so by law or in good-faith belief that such disclosure is necessary to comply with a court order, legal process, or governmental authority; to enforce our Terms of Service; or to protect the rights, property, or safety of THETECHBRAIN LTD, our users, or the public.
• With your consent: We may share your information for any other purpose with your explicit consent.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our service providers to use your data for their own purposes.

6. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activity. Cookies are small text files stored on your device.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the website to function. They cannot be switched off. These include session cookies, authentication cookies, and security cookies.
• Analytics and performance cookies: Help us understand how visitors interact with our Site (e.g. Google Analytics). All data is aggregated and anonymised.
• Functional cookies: Allow us to remember your preferences and settings (language, region, login state) to provide a more personalised experience.
• Targeting and advertising cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.

You can control cookies through your browser settings and our cookie consent banner. Note that disabling certain cookies may affect the functionality of our Services. For more detail, see our Cookie Policy.

7. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. Where we transfer personal data from the EEA or UK to a third country, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on adequacy decisions where applicable.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy unless a longer retention period is required or permitted by law. Specifically:

• Account data: retained for the duration of your account and for up to 2 years following account closure
• Transaction records: retained for 7 years to comply with financial and tax regulations
• Communications: retained for up to 3 years from the date of last interaction
• Analytics data: retained in aggregated, anonymised form indefinitely; individual-level data retained for up to 26 months
• Legal and compliance records: retained for the period required by applicable law, typically 6–7 years

When we no longer need your data, we will securely delete or anonymise it in accordance with our data destruction policy.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 Rights Under GDPR (EEA and UK residents)

• Right of access: Request a copy of the personal data we hold about you (Data Subject Access Request)
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure ("right to be forgotten"): Request deletion of your personal data in certain circumstances
• Right to restriction of processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Rights related to automated decision-making: Not to be subject to decisions based solely on automated processing that significantly affects you
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

9.2 Rights Under CCPA (California Residents)

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected, used, disclosed, or sold
• Right to delete: Request deletion of personal information we have collected about you
• Right to opt out of sale: THETECHBRAIN LTD does not sell personal information. If this changes, you will have the right to opt out.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise any of these rights, please contact us at legal@visionvix.com. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

If you are in the EEA or UK and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, or the relevant supervisory authority in your EU member state).

10. Security

We implement appropriate technical and organisational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements for internal systems
• Regular security assessments and penetration testing
• Staff training on data protection and security practices
• Incident response and data breach notification procedures

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by law. However, no system is completely secure and we cannot guarantee the absolute security of your information.

11. Third-Party Links

Our Services may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

12. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@visionvix.com and we will delete that information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you by email (if you have an account with us) or by posting a prominent notice on our Site
• Where required by law, obtain your renewed consent

We encourage you to review this policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: legal@visionvix.com
• Website: https://securityaudit.dev/
• Postal address: 20 Wenlock Road , London ,N1 7GU, United Kingdom

We aim to respond to all legitimate privacy requests within 30 days.