Privacy Policy

1. Introduction

At MyVuln, we are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy outlines our strict protocols for collecting, using, and safeguarding your information in compliance with Global Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK).

2. Data We Collect

We collect only the essential data required to provide high-fidelity intelligence services:

• Identity Data: Name, professional email address, and organizational affiliation.
• Technical Infrastructure Data: IP addresses, browser fingerprints, and access logs for security auditing.
• Telemetry Data: Anonymized interaction patterns with our dashboard and API to improve detection algorithms.

3. How We Use Your Data

Your data is processed strictly for the following purposes:

• Service Delivery: Providing real-time threat alerts and localized intelligence.
• Platform Integrity: Preventing unauthorized access and ensuring the stability of our sync engine.
• Algorithm Optimization: Enhancing our AI translation and deduplication engines through aggregated, non-identifiable usage data.

4. Security Measures

We employ enterprise-grade security controls:

• Encryption: All data is encrypted using AES-256 at rest and TLS 1.3 in transit.
• Isolation: Per-tenant database isolation ensures your organization's configurations are never accessible by others.
• Access Control: Strict Row Level Security (RLS) policies are enforced at the database level.

5. Data Retention

We retain your information only as long as your account is active or as needed to provide you with the Service. Logs are maintained for a period of 90 days for audit purposes unless required otherwise by law.

6. Third-Party Feeds

MyVuln aggregates data from public sources (NIST, USOM, CISA). While we maintain the integrity of our parsing and delivery, we do not control the original content of these third-party advisories.

7. Your Rights (GDPR/KVKK)

Under GDPR and KVKK, you have the right to access, correct, or erase your personal data. You may also withdraw consent at any time.

8. Contact Us

For any privacy-related inquiries, contact our Data Protection Officer at security@myvuln.io.