1. Introduction
Remedix ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our security scanning service.
2. How Scanning Works
Remedix performs automated security assessments of application surfaces you authorize. Monitor scans emphasize observational and low-impact requests. Verified scans can send bounded security test payloads and should be used on staging where possible. Although destructive and denial-of-service techniques are excluded by design, no active scanner can guarantee zero operational impact on every target.
Scanning Methodology
- Passive Analysis: We analyze public HTTP headers, HTML structure, and client-side scripts to identify misconfigurations and exposed information.
- Safe Active Probing: We send standard HTTP requests with specialized security payloads designed to trigger predictable responses from vulnerable endpoints without executing destructive actions.
- Rate Limiting: Our scanners implement intelligent rate limiting to ensure your infrastructure remains stable during the assessment.
3. Information Collection
Authentication Data
We collect essential account information, including email addresses and authentication credentials. Passwords are stored as one-way hashes. OAuth credentials are handled through the selected authentication provider.
Target Assessment Data
Upon initiation of a scan, we retrieve the target URL and its associated public-facing assets (HTML, HTTP headers, client-side scripts). Scanning is strictly limited to the targets explicitly authorized by the user.
Security Findings
We maintain a record of security vulnerabilities identified during assessments to provide historical reporting and remediation tracking. Access is scoped to the account and authorized service processors.
AI-Assisted Scans
When you select an AI-assisted scan or remediation feature, bounded scan evidence and target context may be sent to the configured AI provider to produce analysis. Authentication secrets are not intentionally included in model prompts. Raw scanner artifacts are not retained by the scanner service unless diagnostic persistence is explicitly enabled by an operator.
4. Data Utilization
- To facilitate and optimize automated security assessments
- To provide technical support and account-related communications
- To maintain the integrity and security of the Remedix platform
- To measure service reliability and improve detection quality using controlled tests and aggregate operational signals
5. Data Retention and Deletion
Assessment data is retained while your account remains active or as needed to provide the service. To request an export, correction, or deletion, contact support. Deletion requests are processed subject to legal, fraud-prevention, billing, and backup-retention obligations.
6. Security Standards
We use HTTPS/TLS in transit, access controls, one-way password hashing, hashed one-time account tokens, and application-level encryption for stored authenticated-scan credentials. Infrastructure providers may also encrypt managed storage. No internet-based service can guarantee absolute security.
7. Third-Party Services
We use third-party services for hosting, authentication, and payment processing. These services have their own privacy policies, and we encourage you to review them. We do not sell your personal information to third parties.
8. Analytics
We use analytics tools to understand how users interact with our service. This helps us improve features and fix issues. Analytics data is used in aggregate and is not sold to third parties. Our analytics providers may use cookies to identify returning visitors and track sessions.
9. Your Rights
Subject to applicable law, you may request access to, correction of, export of, or deletion of your personal information by contacting support.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@remedix.app.