Privacy Notice

PLACEHOLDER PRIVACY NOTICE This is a placeholder document for the CyberPentestAI study tool. The binding Privacy Notice will be supplied prior to public launch. 1. Data Collected. The service collects the account email address, a hashed password, date of birth (for age verification), country of residence, and timestamps describing account lifecycle and access events. When you submit a support ticket, the service also collects the issue details you provide, the affected page, occurrence time, app version, browser/device details, and any error logs you choose to include. 2. Purpose. The collected data is used to operate the service, provide customer support, enforce eligibility requirements, and detect abuse. 3. Data Minimization. Personally Identifiable Information is not written to application logs. 4. Data Subject Rights. Users may request a copy of their data via the data-export endpoint and may request deletion of their account via the account-deletion endpoint, in accordance with applicable law including the General Data Protection Regulation and the California Consumer Privacy Act. 5. Payment Data. Payment card data is processed by a third-party payment processor and is not stored by the service.