CloviTek AI ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use CloviScan (the "Service"). Please read this policy carefully. By using the Service, you agree to the practices described herein.
When you submit a target for scanning, CloviScan generates scan result data, including SSL/TLS certificate details, HTTP header configurations, DNS records, detected software versions, vulnerability matches, and computed security scores. This data is derived from publicly observable characteristics of the target and is stored in association with your account.
We may query third-party vulnerability databases, threat intelligence feeds, and certificate transparency logs to enrich scan results. This data relates to publicly disclosed security information, not to your personal information.
| Purpose | Legal Basis |
|---|---|
| Provide, operate, and maintain the Service | Contract performance |
| Execute security scans and deliver results | Contract performance |
| Process subscriptions and payments | Contract performance |
| Respond to support requests and communications | Contract performance / Legitimate interest |
| Send transactional notices (account activity, security alerts, scan completions) | Contract performance |
| Send service and feature update communications | Legitimate interest (opt-out available) |
| Analyze usage patterns to improve the Service | Legitimate interest |
| Detect and prevent fraud, abuse, unauthorized scanning, and security threats | Legitimate interest / Legal obligation |
| Comply with applicable legal obligations and law enforcement requests | Legal obligation |
| Send marketing communications (with your consent) | Consent |
Scan target data — including domain names, scan configurations, and result histories — is treated as confidential account data. CloviTek AI does not share your scan targets or results with other users or customers of the Service. We will not disclose scan results to third parties except:
CloviTek AI does not use your submitted scan targets or results to train shared models or to enrich data provided to other CloviScan users.
We do not sell your personal information. We may share your information in the following limited circumstances:
We retain personal account data for the duration of your account relationship with us, plus a reasonable period thereafter as required for legal, compliance, dispute resolution, or audit purposes. Account data is deleted within 90 days of account closure upon request. Scan results and security reports may be retained for up to 24 months to enable trend analysis, after which they are deleted or de-identified. Authorization records associated with scan activity may be retained for up to 5 years for compliance and legal purposes.
CloviScan uses the following categories of cookies and similar technologies:
You may control cookie preferences through your browser settings. Note that disabling certain cookies may limit Service functionality.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may require identity verification before fulfilling requests. Note that we may be required to retain certain scan-related records in connection with legal obligations or ongoing investigations, even following an erasure request.
We implement industry-standard technical and organizational measures to protect your information, including encrypted data transmission (TLS 1.2 or higher), encrypted data storage, role-based access controls, and regular security reviews. Scan result data receives heightened access restrictions given its security-sensitive nature. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.
CloviTek AI operates primarily from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US or other countries. Where required by applicable law (e.g., transfers from the European Economic Area), we implement appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly. Contact us at [email protected] if you believe we have inadvertently collected such data.
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or in-Service notice. The updated policy will be effective as of the date posted. Your continued use of the Service constitutes acceptance of the revised policy.
For privacy-related questions, requests, or complaints:
CloviTek AI Privacy
[email protected]