Privacy Policy

1. Who we are

Guardbee.ai operates the Guardbee.ai application and related services. For KVKK purposes we are the data controller. Contact: privacy@guardbee.ai.

2. Scope

This policy covers our marketing site, authentication flows, dashboard, scans, and admin tools. For a concise statutory notice, see the Privacy Notice (KVKK).

3. Data we collect

• Account data: name, email, password (hashed), optional company and website, profile image
• Security scan data: target URLs / hosts you submit, findings, scores, and related metadata
• Technical data: IP, user agent, session cookies, security logs
• Communications: support and KVKK request messages
• Consent preferences: cookie and marketing choices

4. How we use data (including AI / scanning)

• Authenticate users and protect accounts
• Run modular security checks against targets you provide (headers, TLS, cookies, forms, etc.)
• Generate actionable recommendations; future AI-assisted analysis may process scan metadata and findings — not your password, and not unrelated personal data from third-party sites beyond what is publicly returned by the scan target
• Send transactional email (verify, reset, operational notices)
• Maintain audit / activity logs for security and abuse prevention
• With consent: analytics and optional product updates

We do not intentionally scrape personal data of third parties for marketing. Scan targets are under your control and responsibility.

5. Cookies

Essential cookies enable login and security. Analytics / marketing cookies load only with your consent. Details: Cookie Policy.

6. Third parties

Processors may include hosting, email delivery (e.g. Resend), and infrastructure vendors bound by data-processing terms. We do not sell personal data.

7. Security

We use HTTPS in production, hashed passwords, access controls, and security logging. No method of transmission or storage is 100% secure; report concerns to privacy@guardbee.ai.

8. Retention & deletion

We keep data only as long as needed for the purposes above or as required by law. You may request deletion via Contact or privacy@guardbee.ai.

9. Your rights

Depending on your location (including KVKK), you may access, correct, delete, or restrict processing, and withdraw consent. We respond within 30 days where required. You may also complain to the relevant supervisory authority.

10. Children

Guardbee.ai is not directed at children under 16.

11. Changes

We may update this policy. The “Last updated” date at the top will change when we do. Material changes may also be announced in-product or by email.