We collect: your name and contact email address, the domain or URLs you submit for scanning, what you tell us about your stack when enquiring, and the parameters of any scan we run for you. Engagements are invoiced directly — the site takes no payment, so we never see card details.
We do NOT collect: source code beyond the scan session, personal data of your users, or database contents.
To deliver the audit service. To communicate about the engagement. To improve detection accuracy (anonymized aggregate only). We do not sell data. We do not use data for advertising.
Findings are stored in a SQLite database on the operator’s own machine, which has full-disk encryption enforced. Backups are encrypted with AES-256 and are held on that same machine — we do not upload your findings to third-party cloud storage.
Third-party sub-processors:
If we invoice you, the payment provider named on that invoice acts as an independent data controller for the payment itself. No payment is taken through this website.
Per our published Data Retention Policy at pilum.io/legal/retention.
Access, correction, and deletion on request. Email: security@pilum.io. Response within 72 hours.
We set no cookies at all and run no analytics — no page-view tracking, no session recording, no advertising pixels. Nothing on this site reports your visit to a third party.
For all privacy-related inquiries: security@pilum.io