Privacy Policy

We collect information you provide directly when you create an account or use our services:

• Account data — email address, authentication provider details (e.g. Google OAuth), and password hash if applicable.
• Scan data — domains you submit for scanning, scan results, and timestamps.
• Payment data — token purchase history processed through our payment provider (Lemon Squeezy). We do not store raw card numbers.
• Usage data — token balance, scan activity, and feature interactions used to operate the service.

We also automatically collect limited technical data: IP address, browser/user-agent, referring URL, and error logs — solely for security and reliability purposes.

• Provide, operate, and improve the Tekkura scanning service.
• Process token purchases and maintain token balances.
• Send transactional emails (account confirmation, purchase receipts). We do not send marketing emails without your explicit consent.
• Detect and prevent fraud, abuse, or security threats.
• Comply with legal obligations.

We do not sell your personal data. We share it only with:

• Supabase — database and authentication infrastructure.
• Lemon Squeezy — payment processing.
• Anthropic — AI scan processing (domain data only; no personal identifiers are sent).
• Inngest — background job orchestration.
• Law enforcement or regulators when required by applicable law.

We retain your account and scan data for as long as your account is active. You may request deletion of your account at any time by contacting us at tekkura.sec@gmail.com. Scan results are deleted within 30 days of account closure. Anonymised, aggregated analytics may be retained indefinitely.

We use strictly necessary cookies to maintain your authenticated session. We do not use tracking pixels, advertising cookies, or third-party analytics that profile you across sites.

All data is transmitted over TLS. Passwords are hashed using industry-standard algorithms. We follow security best practices and review our systems regularly. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Depending on your jurisdiction you may have the right to:

• Access or export the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Object to or restrict certain processing.
• Lodge a complaint with a supervisory authority (e.g. your national data protection authority).

To exercise any of these rights contact us at tekkura.sec@gmail.com. We will respond within 30 days.

Tekkura is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or by displaying a prominent notice within the application at least 7 days before the change takes effect. Continued use after the effective date constitutes acceptance.

Questions or concerns? Email us at tekkura.sec@gmail.com.