iPentesting
Legal

Privacy Policy

Last updated: June 9, 2026. This policy describes how KAAI TECH LLC ("we," "us") handles information when you use iPentesting.

Who we are

KAAI TECH LLC operates the iPentesting website and application. iPentesting is operated as a subsidiary brand of KAAI TECH LLC. KAAI TECH LLC is the legal entity responsible for the iPentesting service, website, and customer agreements.

For privacy questions or requests, contact privacy@ipentesting.com.

Information we collect

We collect information you provide directly and information generated when you use the Service.

  • Account information: name, email address, organization name, and authentication identifiers
  • Billing information: subscription status and Stripe customer identifiers (payment card details are handled by Stripe, not stored on our servers)
  • Scan data: domain names you submit, timestamps, scan results, scores, findings, and generated reports
  • Usage data: pages viewed, features used, device/browser type, IP address, and diagnostic logs
  • Communications: support messages and feedback you send us

How we use information

We use personal information to operate, secure, and improve the Service.

  • Provide domain scanning, scoring, reports, alerts, and account management
  • Process subscriptions and payments through KAAI TECH LLC and Stripe
  • Send transactional emails such as alerts, receipts, and service notices
  • Detect abuse, fraud, and unauthorized scanning
  • Analyze aggregated usage to improve product quality and reliability
  • Comply with legal obligations and enforce our Terms

Legal bases (where applicable)

Depending on your location, we process personal data based on contract performance (providing the Service), legitimate interests (security and product improvement), consent (where required for optional analytics or marketing), and legal obligation.

How we share information

We do not sell your personal information. We share data only as described below.

  • Service providers: hosting (Vercel), authentication and database (Google Firebase), payments (Stripe), email delivery (Amazon SES), and AI providers when you use optional enrichment features
  • Professional advisors: lawyers, accountants, or auditors under confidentiality obligations
  • Legal requests: when required by law or to protect rights, safety, and security
  • Business transfers: in connection with a merger, acquisition, or sale of assets with appropriate notice

Data retention

We retain account and scan data while your account is active and as needed to provide the Service.

Retention of scan history and reports may vary by plan. You may request deletion subject to legal and billing record requirements.

Backup copies may persist for a limited period after deletion.

Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and access controls.

No method of transmission or storage is completely secure. You are responsible for safeguarding your account credentials.

International transfers

We may process and store information in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Your rights & choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing.

You may cancel your subscription and request account deletion by contacting us. Marketing emails, if any, will include an unsubscribe option.

California residents may have additional rights under the CCPA/CPRA. EEA/UK residents may have rights under GDPR. Contact privacy@ipentesting.com to exercise applicable rights.

Children's privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

Advertising & analytics

We may use analytics tools to understand how visitors use our website and to measure marketing performance.

If we display third-party advertising (such as Google AdSense), advertising partners may use cookies or similar technologies to serve and measure ads according to their policies. Where required, we will present consent choices before non-essential cookies are set.

See our Cookie Policy for more detail on cookies and how to manage them.

Third-party links

Our site may link to third-party websites or tools. Their privacy practices are governed by their own policies, not this one.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy with a new effective date and provide additional notice for material changes where required.

Contact

KAAI TECH LLC — Privacy

Email: privacy@ipentesting.com

Website: https://www.ipentesting.com/contact