Legal

Privacy Policy

PentrAX AI processes account data under GDPR Art. 6(1)(b) (performance of contract) and engagement data under Art. 6(1)(f) (legitimate interest in security testing). We do not sell personal data.

Data we collect

• Account: name, email, organisation, role
• Engagement: target URLs, scope, scan results, evidence artefacts
• Telemetry: anonymised usage metrics for platform reliability

Sub-processors

AWS (eu-west-1, us-east-1), Cloudflare, Stripe, Lovable AI Gateway. Full list on request.

Your rights

Access, rectification, erasure, portability, and objection — exercise via privacy@pentrax.ai.