Privacy Policy

  1. Overview

    This Privacy Policy explains how PentestAI collects, uses, stores, and shares information when you use our website, applications, and related services.

  2. What We Collect

    We may collect account details, authentication information, prompts, uploaded files, chat content, generated output, technical usage data, and limited security-related metadata such as IP address, device, browser, and user-agent information.

  3. Security Testing Data

    If you use PentestAI for security testing workflows, we may process targets, scan-related inputs, command or URL snapshots, and limited surrounding context needed to provide requested features, maintain platform integrity, and investigate abuse.

  4. How We Use Information

    We use information to provide and improve PentestAI, authenticate users, process requested actions, maintain security, detect abuse or fraud, troubleshoot issues, enforce our policies, and comply with applicable law.

  5. How We Share Information

    We may share information only with service providers and infrastructure partners needed to operate PentestAI, or when disclosure is required by law, valid legal process, or necessary to protect the service, our users, or others. We do not sell your personal information.

  6. Limited Safety and Abuse Retention

    For abuse prevention, incident review, and platform security, we may retain limited scan-related safety records, including selected command or URL snapshots and limited recent user context, for up to 60 days, unless preservation is required for security, legal, or compliance reasons.

  7. Retention and Security

    We retain information for as long as reasonably necessary to operate the service, maintain accounts, enforce our terms, resolve disputes, and meet legal or security obligations. We use reasonable technical and organizational measures to protect information, but no system is completely secure.

  8. Your Rights and Choices

    Depending on your location, you may have rights to access, correct, delete, restrict, object to, or request portability of your personal data, and to withdraw consent where applicable.

  9. Updates and Contact

    We may update this Privacy Policy from time to time. If you have questions about this policy or our data practices, contact us at support@pentestai.co.