baessa Security Scanner Privacy Policy
Effective Date: October 3, 2026baessa Security Scanner (hereinafter referred to as the "Service") complies with the Act on the Protection of Personal Information and is committed to properly protecting and managing information and vulnerability assessment data received from customers.
1. Information Collected
In connection with your use of the Service, we may collect the following categories of information:
• Target web application URLs
• Temporary test credentials (usernames, passwords) voluntarily entered for authenticated scanning
• Payment processing metadata (securely processed via Stripe; no credit card details are stored on our servers)
• Assessment logs and vulnerability verification artifacts
2. Purpose of Use
Collected information is utilized strictly for the following purposes and will never be sold or provided to third parties for secondary marketing:
• Conducting security assessments against the specified web application
• Generating and delivering technical vulnerability assessment reports
• Responding to support inquiries and performing technical system maintenance
3. 24-Hour Automatic Data Purge Policy
To guarantee customer confidentiality and data security, all on-screen reports, detailed vulnerability findings, and temporary credentials are permanently purged from our database 24 hours after assessment completion. Please download your report files within 24 hours.
※ Only sanitized network audit trails (timestamps, target hostnames, egress logs) are retained securely for anti-abuse and investigative audit purposes.
4. Security Measures
The Service implements end-to-end encryption in transit (HTTPS / TLS), encrypted secret management, and strict principle-of-least-privilege operations to protect data against unauthorized access and disclosure.
5. Inquiries
For privacy inquiries, please contact our support team at shop@ba-essa.com or via the Commercial Transactions Act disclosure details.