Privacy Policy

Last updated: July 2026

1. Who we are

VULNKON is a security assessment platform operated by Konstent (“we”, “us”). This policy describes how we collect, use, and protect information when you use VULNKON.

2. Information we collect

  • Account information: name, email address, and organization membership.
  • Assessment data you provide or that our scanning modules produce: target hostnames/domains/IPs, discovered assets, findings, and scan configuration.
  • Audit and usage logs: sign-ins, actions taken within the platform, and API activity.
  • Communication data: email addresses and message content when we send you transactional email (e.g. sign-in codes, verification links).

3. How we use information

  • To operate and secure the platform, including authenticating your sign-ins.
  • To run the security scans and assessments you request, and to generate reports.
  • To send account-related email (verification codes, sign-in links, invitations) via the Gmail API on our behalf.
  • Where AI-assisted analysis features are enabled, relevant scan findings may be sent to a third-party AI provider (e.g. OpenAI) to generate summaries or recommendations.
  • To maintain audit logs for security and compliance purposes.

4. Data storage and retention

Data is stored in Google Cloud Firestore under access controls scoped to your organization. Data is retained for as long as your account or organization remains active, or as required to comply with legal obligations, after which it may be deleted upon request.

5. Sharing

We do not sell your data. We share data only with the infrastructure and processing providers necessary to operate the platform (e.g. hosting, database, and, where applicable, AI analysis providers), each bound by their own data protection terms.

6. Security

We apply industry-standard safeguards including encrypted transport, role-based access control, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at the email below.

8. Contact

Questions about this policy can be sent to info@konstent.com.