Privacy Policy

Last updated: September 14, 2026

1. Who we are

Auditly is a security-scanning service operated by ArkandSoft ("we", "us", "our"). This policy explains what data we collect when you use auditly.arkandsoft.com (the "Service") to request a scan, why we collect it, and the choices you have.

2. Information we collect

Scan request data: the domain you submit, the verification proof you provide (a DNS TXT record value or a file at your site's root), and the email address you give us to deliver the report.

Scan output: the findings our checks produce against the domain you verified — headers, TLS configuration, cookies, exposed files, and similar. This can include sensitive detail about that domain's security posture, since that is the point of the report.

Billing information: when you pay for a scan, our payment processor collects and stores your card details directly; we never see or store your full card number. We keep only the transaction reference and plan status needed to fulfill your order.

Technical data: we briefly process your IP address to enforce rate limits and prevent abuse of the verification and scan-request endpoints. This is used transiently and is not linked to a profile.

3. What we don't collect

We do not run analytics, advertising, or cross-site tracking scripts on the Service. We don't sell, rent, or share your personal data or scan results with third parties for marketing purposes.

4. How we use your information

To confirm you control the domain before running any active test, to run the scan you requested, to generate and deliver your report, to process payment, to enforce fair-use rate limits, and to respond to support requests you send us.

5. Service providers we share data with

We rely on a small number of specialized providers to run the Service: a payment processor for billing, an email provider for report delivery, and our hosting/infrastructure provider. We only share the minimum data each provider needs to perform its function; none of them are authorized to use your data for their own purposes.

6. How long we keep scan results

A report and the verification proof tied to it are kept only as long as needed to deliver the report and support your account (for subscription plans, to show report history). You can request deletion of a past report and its underlying findings at any time; we do not keep scan output indefinitely once you ask us to remove it.

7. Cookies

We use only essential, first-party mechanisms: your language preference is stored locally in your browser (not a tracking cookie), and a short-lived session token is used to associate a payment with your scan request. We use no advertising or cross-site tracking cookies.

8. Data retention

We keep your account and billing data for as long as your account is active or as required for tax and accounting purposes. Scan results follow the retention described in section 6. If you delete your account, we delete your personal data within a reasonable timeframe, except where we're legally required to retain billing records.

9. Security

We apply industry-standard safeguards: encrypted connections (HTTPS/TLS) everywhere, access control around report data so it is reachable only through authenticated application logic, and no plaintext storage of card numbers. Because scan reports can contain sensitive findings about your infrastructure, we treat report storage and access with the same care we'd want applied to our own. No system is perfectly secure, but we take reasonable, ongoing steps to protect your information.

10. Your rights

You can access, correct, or request deletion of your personal data and past reports at any time by writing to us. We will respond and act promptly.

11. Children's privacy

The Service is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under 18.

12. International data transfers

Our service providers may operate infrastructure in multiple countries. By using the Service, you understand your data may be processed outside Colombia, by providers who maintain their own compliance and security safeguards.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "last modified" date on this page. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

14. Contact

Questions about this Privacy Policy, or requests regarding your data, can be sent to privacy@arkandsoft.com.

← Back to home