← Back to Secuwithlove

Privacy Policy

Last updated: 2026

1. Who we are (controller)

Security With Love Sàrl, Avenue de la Gare 12, 1003 Lausanne, Switzerland, is the controller of the personal data described in this policy. For any privacy question or request, email contact@securitywithlove.com or use the contact form on this site.

2. Data we process

Account data: name, company, email address, hashed credentials or identity-provider identifier.

Billing data: subscription and payment records handled by our payment processor; we do not store full card numbers.

Service data: the targets and results of the scans you run, alerts and reports you create, and hunt or intelligence queries you make.

Communications: contact-form messages and notification email copies sent to the address on your account.

Technical logs: IP address, timestamps and user agent, needed for security and abuse prevention.

3. Purposes and legal bases

We process personal data to perform our contract with you (providing the portal, scans, reports, alerts and support), on the basis of our legitimate interest in securing the service and preventing abuse, to comply with legal obligations (accounting, lawful requests), and, where required, on the basis of your consent (marketing emails, non-essential cookies and advertising). You may withdraw consent at any time without affecting prior processing.

4. Recipients and processors

Data is shared only with processors strictly needed to run the service: hosting and database infrastructure, email delivery, payment processing, and the public threat-intelligence sources queried when you launch a scan. Scan targets you submit may be sent to those third-party intelligence providers. We never sell personal data.

5. International transfers

Some processors are located outside the EU/EEA and Switzerland. Such transfers rely on adequacy decisions or EU Standard Contractual Clauses with the equivalent Swiss addenda.

6. Retention

Account data is kept for the lifetime of the account and deleted (or anonymised) within 90 days of closure, except where a longer statutory retention applies. Scan results, reports and alerts are kept until you delete them. Technical logs are kept for a maximum of 12 months.

7. Your rights

You may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest. Requests can be made through the contact form and are answered within 30 days. You also have the right to lodge a complaint with your supervisory authority or with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

8. Security

Data is protected by encryption in transit, access control, row-level isolation between accounts and least-privilege administration. No system is fully secure, and we cannot guarantee absolute security.

9. Cookies and advertising

We use strictly necessary cookies for authentication and session management. We do not load third-party advertising scripts on the platform itself.

10. Data you submit about third parties

If you submit data concerning third parties (for example scan targets, logs or findings containing personal data), you act as controller for that data and warrant that you have a valid legal basis to process it and to transmit it to us.

11. Changes and related documents

This policy may be updated at any time; continued use of the platform after changes constitutes acceptance of the updated policy. See also our Terms of Service and our legal disclaimer.

Legal disclaimer · All services, scans, intelligence and reports are provided “as is”, without warranty of any kind. Secuwithlove accepts no responsibility and shall not be held liable for any direct or indirect damage, loss of data, business interruption or security incident resulting from the use of this platform or from any action taken on the basis of its outputs. You are solely responsible for having authorisation to assess any asset you submit and for your own security decisions. Read the full disclaimer.