Privacy Policy

Last updated: August 2026. Summary of how Protegon processes personal data. Have counsel review before relying on this as a final legal policy.

We process account data (email via Cognito), billing data (Stripe), and scan targets you submit (stored in our AWS EU infrastructure) to provide the service. Exact retention depends on plan and operational needs; you may request access or deletion where applicable under GDPR. Optional analytics: if you accept cookies, we load Google Analytics 4 (Consent Mode) to measure marketing and product usage (page views and enumerated events such as CTA clicks or scan start). We do not send scanned URLs, finding contents, raw scan IDs, or email addresses to Google. A hashed Cognito user id may be set only after consent. You can reject or change preferences via Cookie preferences in the footer. Analytics is disabled when no Measurement ID is configured. Subprocessors include AWS, Stripe, and Amazon Cognito; Google only when analytics consent is granted.