Bugnexa - Privacy Policy

BugNexa is an automated cybersecurity testing and vulnerability assessment platform operated by SysINet InfoSolutions LLP ("Company," "we," "our," or "us").

We are committed to protecting the privacy, confidentiality, and security of information collected and processed through the BugNexa website, platform, and related services.

This Privacy Policy explains how we collect, use, store, process, share, and protect information when users visit our website, register accounts, purchase scan credits, conduct authorized security assessments, or use our services.

Information We Collect

BugNexa may collect and process the following information:

Personal and Account Information

• Name, email address, phone number, and company details.

• Account registration and login information.

• User roles, permissions, and organization details.

• Contact forms, demo requests, and support communications.

Security Assessment Information

• Authorized domains, IP addresses, servers, and assessment targets.

• Scan configurations, assessment scope, and execution details.

• Vulnerability findings, exposed services, and technical evidence.

• Security reports, remediation recommendations, and assessment history.

Subscription and Payment Information

• Subscription plans and account details.

• Scan-credit purchases, allocations, usage, balances, and applicable expiry information.

• Payment transaction references, invoices, and billing details.

Technical and Usage Information

• IP addresses, browser information, and device details.

• Login activity, platform usage, and session records.

• Security logs and operational activity.

• Cookies and similar technologies, where applicable.

Communications

• Customer support enquiries and feedback.

• Newsletter subscriptions and marketing preferences.

• Service notifications and related communications.

How We Use Information

We use collected information to:

• Provide automated vulnerability assessment and security scanning services.

• Manage user accounts, subscriptions, permissions, and scan credits.

• Execute authorized assessments and generate security reports.

• Provide vulnerability findings and remediation recommendations.

• Support enterprise, vendor, and B2B partner accounts.

• Maintain platform security, reliability, and functionality.

• Prevent unauthorized access, misuse, and fraudulent activities.

• Provide customer support and respond to enquiries.

• Improve our products, services, and user experience.

• Process payments and maintain transaction records.

• Send service notifications and permitted marketing communications.

• Meet applicable legal, regulatory, and contractual obligations.

Personal information is processed in accordance with applicable legal requirements, including obtaining consent where required.

Security Assessment Data and Confidentiality

BugNexa processes information submitted by users for authorized cybersecurity assessments.

Such information may include infrastructure details, vulnerability findings, technical evidence, and security reports.

We take reasonable technical and organizational measures designed to protect customer assessment information from unauthorized access, disclosure, alteration, or loss.

Access to assessment data is restricted according to applicable account permissions, service requirements, and authorized operational responsibilities.

Users are responsible for ensuring that they own or have valid authorization to scan the assets submitted to BugNexa.

Users must also protect their account credentials and ensure that downloaded security reports are shared only with authorized parties.

Scan Credits and Transaction Information

BugNexa maintains records related to subscriptions, scan-credit purchases, allocations, usage, balances, and applicable expiry dates.

This information is used for account management, billing, customer support, security, and transaction tracking.

Where third-party payment service providers are used, payment-related information may be processed according to their applicable security and privacy practices.

Credit validity and expiry are governed by the applicable subscription or purchase terms communicated to the customer.

Transaction records may be retained as necessary for accounting, taxation, dispute resolution, and applicable legal requirements.

Data Sharing and Third-Party Services

BugNexa may engage authorized third-party service providers to support platform operations, including:

• Cloud hosting and infrastructure.

• Payment processing and billing.

• Security scanning technologies and vulnerability information services.

• Reporting and technical processing.

• AI-assisted analysis, where applicable.

• Customer communication and support services.

Information may be shared with these providers only to the extent reasonably necessary to deliver the relevant services, subject to applicable security, confidentiality, and data protection requirements.

Authorized organization administrators and business partners may access relevant information according to their assigned roles and permissions.

Information may also be disclosed when required by applicable law, lawful government requests, or valid legal processes.

AI-Assisted Processing

BugNexa may use automated analysis and AI-assisted technologies to support security findings, vulnerability analysis, risk prioritization, and remediation recommendations.

Where external AI or technical service providers are involved, information necessary for the relevant functionality may be processed by authorized providers under applicable confidentiality and data protection arrangements.

AI-assisted findings and recommendations are intended to support cybersecurity assessments and may require validation by qualified security professionals.

Data Storage, Retention, and Deletion

BugNexa retains information for as long as reasonably necessary for service delivery, security, account management, contractual obligations, and applicable legal requirements.

Retention periods may vary depending on the information category and the purpose of processing.

• Account Information: Retained as needed to operate accounts and meet applicable post-closure obligations.

• Scan Results and Reports: Retained according to applicable service, contractual, operational, and legal requirements.

• Payment and Credit Records: Retained for billing, accounting, taxation, and related obligations.

• Security and Activity Logs: Retained as necessary for platform security, investigations, and legal requirements.

• Marketing Information: Retained while a valid purpose or legal basis exists, subject to applicable user preferences.

Expiry of scan credits does not automatically result in deletion of user accounts, scan history, or transaction records.

Users may request deletion of eligible personal information by contacting BugNexa.

Deletion requests will be evaluated and processed subject to applicable legal, contractual, operational, and security-related retention requirements.

Cookies and Website Usage

BugNexa may use cookies and similar technologies for:

• User authentication and session management.

• Website functionality and platform security.

• Remembering relevant user preferences.

• Website analytics and performance improvement, where implemented.

Users can manage or disable certain cookies through their browser settings or available website controls.

Disabling essential cookies may affect the functionality of the website or platform.

Where consent is required for non-essential cookies or similar technologies, applicable consent mechanisms will be provided.

International Data Processing

Depending on the infrastructure and third-party service providers used, certain information may be processed or stored outside India.

Where international processing occurs, BugNexa will take appropriate measures to comply with applicable legal restrictions and data protection requirements.

Such processing will be subject to relevant security, confidentiality, and contractual safeguards.

User Privacy Rights

Subject to applicable law, users may have the right to:

• Request access to or information about their personal data.

• Request correction or updating of inaccurate information.

• Request deletion of eligible personal information.

• Withdraw consent where processing is based on consent.

• Raise privacy-related grievances or complaints.

• Exercise other rights available under applicable data protection laws.

Privacy-related requests may be submitted to support@bugnexa.com.

We may request reasonable information to verify the identity and authority of individuals submitting requests.

Requests will be reviewed and handled according to applicable legal requirements.

Marketing Communications

BugNexa may send product announcements, cybersecurity insights, newsletters, service updates, and promotional communications where permitted by applicable law.

Users may unsubscribe from marketing communications using available unsubscribe options or by contacting us.

Unsubscribing from marketing communications will not affect necessary transactional, billing, security, or account-related notifications.

Data Security and Incident Management

BugNexa applies reasonable technical and organizational security measures designed to protect information against unauthorized access, misuse, modification, disclosure, or loss.

Such measures may include access controls, authentication mechanisms, security monitoring, and operational security procedures, as applicable.

In the event of a personal data security incident, we will take appropriate steps to investigate, contain, assess, and address the incident.

Affected users or relevant authorities will be notified where required by applicable law and within applicable legal timelines.

While we work to maintain appropriate security protections, no internet-based platform can guarantee absolute security.

Children's Privacy

BugNexa is intended for businesses, IT professionals, cybersecurity teams, and other authorized users.

Our services are not directed toward children.

Where children's personal information is processed, applicable legal requirements and safeguards will be followed.

Changes to This Privacy Policy

BugNexa may update this Privacy Policy to reflect changes in platform functionality, business operations, technology, service providers, or applicable legal requirements.

The latest version will be published on our website with an updated revision date.

Where legally required, material changes will be communicated to affected users, and additional consent will be obtained where necessary.

We encourage users to review this Privacy Policy periodically.

Applicable Law

This Privacy Policy is subject to applicable Indian laws. Nothing in this Policy affects any rights available to users under applicable law.

Contact Information

For privacy-related enquiries, complaints, or personal information requests, please contact:

Company: SysINet InfoSolutions LLP

Platform: BugNexa

Website: https://bugnexa.com

Email: support@bugnexa.com

Privacy & Grievance Contact: support@bugnexa.com

We will review and respond to privacy-related requests in accordance with applicable legal requirements.