Privacy Policy

This Privacy Policy explains what information Aion Security ("we," "us," or "our") collects when you use aionsecurity.io (the "Service"), and how we use, store, and protect it.

1. Information We Collect

• Account information. If you create an account to use the monitoring dashboard, we collect your email address via our authentication provider (Clerk).
• Domains you submit. The domain names you enter into the free scanner or add to your monitoring dashboard.
• Scan results.Technical security data about the domains you submit — SSL certificate details, HTTP headers, DNS and email authentication records, blacklist status, and detected platform/plugin information. This is data about the domain, not about you personally.
• Usage and log data. Standard technical data such as IP address and request timestamps, collected to operate rate limiting and prevent abuse of the free scanner.

We do not use third-party advertising trackers or analytics cookies on the Service.

2. How We Use Information

We use the information above to:

• Provide and operate the free scanner and monitoring dashboard
• Run scheduled scans of domains you've added for monitoring
• Send email alerts when a monitored domain's security posture changes, if this feature is enabled on your account
• Maintain the security and reliability of the Service, including rate limiting and abuse prevention
• Communicate with you about your account or respond to support requests

3. Third-Party Service Providers

We rely on a small number of trusted providers to operate the Service:

• Clerk — authentication and account/session management
• Supabase — hosting of our application database
• An email delivery provider — used to send monitoring alert emails, if and when this feature is configured

These providers process data on our behalf and are contractually restricted from using it for any purpose other than helping us operate the Service.

4. Cookies

The Service uses a session cookie set by our authentication provider (Clerk) to keep you signed in. We do not currently use advertising or third-party tracking cookies.

5. Data Retention

We retain account information and scan history for as long as your account remains active. You can remove a domain from monitoring at any time from your dashboard. If you'd like your account and associated data deleted entirely, contact us using the details below.

6. Data Security

We take reasonable technical measures to protect the data we hold, including encrypting traffic to the Service in transit and restricting database access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have rights to access, correct, or delete the personal information we hold about you. To exercise these rights, contact us using the details below and we will respond as required by applicable law.

8. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above.

10. Contact

Questions about this Privacy Policy can be sent to us via our Contact page.

This document is provided as a general Privacy Policy template and does not constitute legal advice. We recommend having it reviewed by a qualified attorney, particularly if you plan to process data from users in jurisdictions with specific requirements (such as GDPR or CCPA), before relying on it for your specific business needs.