Privacy Policy

1. Scope

This Privacy Policy applies to the Inhumans.io website, application, security scanning service, reports, billing flows, and related support communications. By using the service, you acknowledge that your information will be processed as described in this policy.

2. Information We Collect

• Account information, including name, email address, authentication provider, and account identifiers.
• Domain and workspace information submitted for verification, scanning, and reporting.
• Scan-related information, including findings, risk scores, reports, evidence, logs, and remediation notes.
• Billing and transaction metadata provided by Polar, such as checkout status, product identifiers, credits purchased, and receipt information. We do not store full payment card numbers.
• Technical and usage information, including IP address, browser information, device information, cookies, analytics events, error reports, and server logs.

3. How We Use Information

• To create, authenticate, secure, and administer user accounts.
• To verify domain ownership and provide requested security scans and reports.
• To generate findings, summaries, remediation guidance, and AI-assisted handoff prompts.
• To process purchases, credits, refunds, referral rewards, taxes, receipts, and fraud checks.
• To monitor, debug, secure, and improve the service.
• To respond to support, legal, billing, and security requests.
• To comply with applicable law and enforce our agreements and policies.

4. Google Sign-In

If you use Google Sign-In, we use Google only to authenticate your account and receive basic profile information, such as your email address and account identifier. Inhumans.io does not request access to Gmail, Google Drive, Google Calendar, or other sensitive Google user data for the current sign-in flow.

5. Payments

Payments are processed by Polar. Polar may act as merchant of record and may collect and process information required for checkout, tax calculation, receipts, fraud prevention, refunds, chargebacks, and legal compliance. Your use of Polar checkout may be subject to Polar's own legal terms and privacy policy.

6. Disclosure of Information

We do not sell personal information. We may disclose information to vendors and service providers that support hosting, authentication, payments, analytics, error monitoring, communications, security, and customer support. We may also disclose information if required by law, legal process, or to protect the rights, property, safety, and security of Inhumans.io, users, or third parties.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain information for as long as necessary to provide the service, maintain security and audit records, comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce our agreements. Retention periods may vary depending on the type of information and the reason it was collected.

9. Your Rights and Choices

You may contact us to request access, correction, deletion, or export of personal information associated with your account. We may retain certain information where required or permitted for legal, tax, billing, security, fraud-prevention, or legitimate business purposes.

10. Contact

For privacy questions, contact support@inhumans.io.