Privacy Policy

Controller: Trackflaw SAS

Address: 60 rue François 1er, 75008 Paris, France

Email: contact@flawfence.com

DPO (Data Protection Officer): dpo@flawfence.com

2.1. Identification data

• Last name, first name
• Email address
• Phone number
• Company name
• Position within the company

2.2. Connection data

• IP address
• Connection logs
• Browser type
• Operating system
• Pages visited and time spent

2.3. Technical data

• Domains and subdomains analysed
• IP addresses of your infrastructure
• Security scan results
• Detected vulnerabilities
• Configuration of scanned assets

Your data is collected for the following purposes:

• Provision of the service: Security analysis, vulnerability detection, report generation
• Customer account management: Creation and management of your user account
• Billing: Issuing invoices and managing payments
• Customer support: Responding to your requests and technical assistance
• Service improvement: Usage analysis and platform optimisation
• Communication: Sending information about the service and security updates
• Legal obligations: Compliance with accounting and tax obligations

The processing of your data is based on:

• Performance of the contract: For the provision of the Flawfence service
• Consent: For newsletters and marketing communications (revocable at any time)
• Legitimate interest: For improving the service and securing the platform
• Legal obligations: For the retention of billing data

Your data may be shared with:

• Authorised staff of Trackflaw SAS: Technical, support and sales teams
• Technical providers: Hosting, infrastructure, payment (under a GDPR data-processing agreement)
• Legal authorities: Upon legal or judicial request

Your data is never sold to third parties.

• Account data: For the entire duration of the contract + 3 years after the end of the contract
• Billing data: 10 years (legal accounting obligation)
• Scan data and reports: For the entire duration of the contract
• Connection logs: 12 months maximum
• Marketing data: 3 years from the last contact (or until consent is withdrawn)

In accordance with the GDPR, you have the following rights over your data:

• Right of access: Obtain a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request the deletion of your data
• Right to restriction: Restrict the processing of your data
• Right to portability: Retrieve your data in a structured format
• Right to object: Object to the processing of your data
• Right to withdraw your consent: At any time for processing based on consent

Trackflaw SAS implements appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Strong authentication and access management
• Intrusion monitoring and detection
• Regular backups and disaster recovery plan
• Regular security audits
• Staff training in security best practices

Your data is hosted within the European Union. In the event of a transfer outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, Privacy Shield certification, etc.).

We may amend this privacy policy at any time. Any significant change will be notified to you by email or via a notification on the platform.