Legal & Data Governance

Privacy Policy

Last updated: September 2026 · Effective date: September 2026

1. Overview & Commitment

WeSecureX Cybersecurity ("WeSecureX", "we", "us", or "our") is committed to protecting the privacy of our users, customers, and visitors. This Privacy Policy outlines our principles regarding the collection, processing, storage, and safeguarding of information when you interact with our website (wesecurex.com), APIs, and security scanning engines.

2. Information We Collect

We collect information strictly necessary to provide, manage, and secure our vulnerability assessment and subscription services:

  • Account & Profile Information: Authorized contact name, business email address, telephone number, authentication credentials, and organization name provided during registration or account setup.
  • Billing & Transaction Details: When purchasing or managing paid subscriptions (such as Pro or Agency tiers), billing contact information, transaction histories, and partial card details (such as the last 4 digits of your payment card and card brand/network) are recorded for invoicing and accounting. We do not record or store card expiration dates.
  • Target Domain & Technical Telemetry: Domain names, IP addresses, HTTP response headers, SSL/TLS certificate chains, and DNS configurations submitted for security evaluation.
  • Automated Scan Logs: Findings, vulnerability classifications (CVSS scores), timestamped audit results, and remediation verification records generated during dynamic scans.
  • Usage Telemetry: Aggregated system performance logs, browser agent details, and access timestamps to ensure platform stability.
  • Cookies & Session Identifiers: Essential session cookies and local tokens strictly necessary for user authentication, session security, and defense against automated attacks. When advertising is shown on this website, separate advertising cookies may also be used, as described below.

3. How We Process Scan Data

Target scan data is processed solely to generate vulnerability reports, track security diffs over time, and deliver actionable remediation telemetry. We do not sell, rent, or monetize your scan data or proprietary vulnerability findings to third-party data brokers or advertisers.

4. Payment Processing & Credential Protection

All payment transactions are processed securely through certified, regulated third-party payment gateways, payment aggregators, and PCI-DSS compliant payment service providers.

No Cardholder Data or Payment Credential Storage: WeSecureX does not collect, handle, or store complete credit or debit card numbers, CVV/CVC security verification codes, banking PINs, UPI PINs, One-Time Passwords (OTPs), or customer payment credentials on our servers. All sensitive payment details are securely tokenized and transmitted directly from your client browser to the certified payment processor via encrypted TLS 1.3 channels. Our payment processing partners comply with the Payment Card Industry Data Security Standards (PCI-DSS) and applicable regulatory payment aggregator directives.

5. Legal Basis for Processing (GDPR & International Law)

For users subject to the General Data Protection Regulation (GDPR) or similar frameworks, we process personal data under the following legal bases:

  • Contractual Necessity: To deliver vulnerability audits, report generation, account management, and process payment subscriptions requested by the user.
  • Legitimate Interest: To maintain network security, defend our scanning infrastructure against abuse, and prevent fraudulent transactions and chargebacks.
  • Legal Compliance: To comply with applicable cybersecurity reporting regulations, statutory accounting standards, and tax obligations.
  • Consent: Where required, to store or read advertising cookies and similar identifiers used to serve and measure ads.

6. Third-Party Subprocessors & Data Sharing

We share relevant data with trusted third-party service providers solely to operate our infrastructure, fulfill transactions, and protect users:

  • Payment Service Providers & Aggregators: Certified payment gateways, payment aggregators, and acquiring banking partners to securely authorize transactions, manage subscriptions, process refunds, track transactions, detect and mitigate fraud, and fulfill statutory compliance obligations. By initiating a transaction or subscribing to our services, you consent to the transmission of necessary transaction and billing data to these regulated providers for these specific purposes.
  • Infrastructure & Hosting: Cloud computing providers, DDoS protection networks, and encrypted database infrastructure operating under signed Data Processing Agreements (DPAs).
  • Legal & Fraud Prevention: Banking networks, regulatory bodies, and fraud-monitoring systems to investigate unauthorized charges, comply with lawful authority mandates, and protect against financial abuse.

7. Cookies and Advertising

Third parties, including Google, may place and read cookies on your browser, or use web beacons and IP addresses, to collect information as a result of ad serving on this website. That information is used to show ads, limit how often an ad is shown, and measure ad performance. This is separate from scan results: we do not sell your scan data or vulnerability findings.

How Google uses information from sites or apps that use its services is explained here: How Google uses data when you use our partners' sites or apps.

8. Data Retention & Security Controls

All data in transit is encrypted using modern TLS 1.3 cryptography. Scan results and database records are protected at rest using AES-256 encryption. We enforce automated retention schedules that archive or purge historical scan telemetry in accordance with organizational policies. Invoices, tax records, and transaction histories are securely retained in compliance with statutory financial retention requirements.

9. Your Data Subject Rights

Depending on your jurisdiction, you possess the right to access, rectify, or request deletion (Article 17 GDPR "Right to be Forgotten") of your personal data. You may exercise these rights at any time by contacting our data protection team.

10. Contact Information

For inquiries regarding this Privacy Policy, billing data, or our security practices, contact us at:
WeSecureX Cybersecurity (WeSecureX)
Website: https://wesecurex.com
General & Legal Inquiries: info@wesecurex.com
Billing & Customer Support: support@wesecurex.com
Customer Support Telephone & WhatsApp: +91 91047 58988
Support Operating Hours: Monday - Friday, 9:00 AM - 6:00 PM IST (24/7 Ticketing Support)

11. Policy Modifications & Updates

We reserve the right to periodically update this Privacy Policy to reflect changes in our legal obligations, regulatory guidance, or platform functionality. Any modifications will be posted directly to this page with an updated revision date. Your continued use of our platform following the posting of revisions constitutes acceptance of the updated policy.