Privacy Policy
Last updated: August 2026
ReconSec ("we," "us," "our") provides automated website security assessments. This policy explains what information we collect when you use reconsec.online or request a scan, how we use it, and the choices you have.
1. Information We Collect
Information you provide
- Your name, company name, and contact details (email, and phone number if you choose to share it), when you request a scan or otherwise contact us.
- The target website or domain you ask us to assess.
- Any additional context you share about your business, industry, or security concerns.
Information generated by our assessment
- Technical findings about the target website — such as HTTP headers, SSL/TLS configuration, exposed ports and services, and publicly observable vulnerabilities — collected using automated scanning tools.
- We do not attempt to access non-public systems, exploit vulnerabilities, or extract data from the target beyond what an automated surface-level scan observes.
Information collected automatically
Our website is hosted on Cloudflare, which may log standard technical data (such as IP address, browser type, and request timestamps) for security and performance purposes. We do not use tracking cookies or third-party advertising trackers on reconsec.online.
2. Scan Authorization
By requesting a scan, you confirm that you own the target website or domain, or are otherwise authorized to request security testing of it on behalf of its owner. ReconSec relies on this representation and does not independently verify domain ownership before performing an automated, non-intrusive scan.
3. How We Use Your Information
- To perform the security scan you requested and prepare your report.
- To respond to your inquiries and communicate about our services, including the paid deep-dive assessment.
- To improve the accuracy and clarity of our scanning process and reporting.
- To meet legal or regulatory obligations where applicable.
We do not sell your personal information, and we do not use it for advertising.
4. Sharing and Sub-processors
We share information only with service providers who help us operate ReconSec, under confidentiality obligations consistent with this policy:
- Cloudflare — website hosting, DNS, and security.
- ImprovMX — email forwarding for our contact addresses.
We do not share your information with any other third party except where required by law, or with your explicit consent (for example, if you ask us to share a report with your developer or hosting provider).
5. International Data Transfers
Because we use globally distributed infrastructure providers (such as Cloudflare), information may be processed or stored in countries outside the one where you or the target website are located, including outside Pakistan and the Gulf region. Where applicable local law requires specific safeguards for cross-border transfers (as under the UAE and Saudi PDPLs), we aim to rely on our providers' standard contractual and security safeguards — clients with specific cross-border transfer requirements should contact us before engaging our services.
6. Data Retention
We retain scan reports and related correspondence for as long as reasonably necessary to provide our services, respond to follow-up questions, and maintain business records — typically no longer than 24 months after our last contact with you, unless you ask us to delete it sooner or we're required to keep it longer by law.
7. Security
As a security company, we hold ourselves to the same standard we assess in others. We apply reasonable technical and organizational measures to protect the information we hold, including encrypted transport (HTTPS everywhere), restrictive access controls, and minimal data collection. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your information, subject to legitimate business or legal retention needs.
- Object to or restrict certain processing.
To exercise any of these rights, contact us using the details below. We will respond within a reasonable time and in line with any applicable local requirements.
9. Children's Privacy
ReconSec's services are directed at businesses, not individuals under 18. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this policy as our services or applicable law change. We'll update the "Last updated" date above when we do. Continued use of our services after changes take effect means you accept the updated policy.