Privacy Policy

Hax.nu (“we”, “us”, “our”) is a cybersecurity platform and services company. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, platform, or services at https://hax.nu.

By using the platform you agree to the practices described in this policy. If you do not agree, please discontinue use.

We collect information in the following ways:

• Contact form submissions: name, email, company, and message content you provide
• Account information: name, email, and organization details when you create a workspace
• Usage data: pages visited, features accessed, and interaction patterns for product improvement
• Asset and scan data: domain names, IP ranges, and configuration files you submit for authorized assessment
• Technical data: IP address, browser type, and referrer information in server logs

We use collected information to:

• Respond to contact and assessment inquiries
• Provide, operate, and improve the platform
• Send service communications and security alerts
• Prevent fraud, abuse, and unauthorized use
• Meet legal obligations and enforce our terms

Configuration files and scan data submitted for audit and assessment are treated with particular care given their sensitive nature. This data is:

• Encrypted in transit and at rest
• Access-controlled to your workspace and authorized personnel only
• Not used to train models or shared with third parties without explicit consent
• Retained only for the period necessary to deliver the service or as required by law

We do not sell your personal information. We may share data with trusted service providers (hosting, analytics, email) under data processing agreements, or where required by law. We do not share security assessment data with third parties except as explicitly agreed in a services engagement.

Contact inquiries are retained for up to 24 months. Platform data is retained while your account is active and for a reasonable period afterward. You may request deletion at any time by contacting [email protected].

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your data. Contact us at [email protected] to exercise these rights. We will respond within 30 days.

We use functional cookies necessary for session management and security. We do not use third-party advertising cookies. Analytics cookies may be added in future with appropriate notice and controls.

We implement appropriate technical and organizational measures to protect your data including encryption, access controls, and security monitoring. No system is completely secure — please use strong passwords and report suspected vulnerabilities to [email protected].

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice in the platform. Continued use after changes constitutes acceptance.

Questions about this policy? Contact us at [email protected] or via the contact form.