Privacy Policy
Effective 1 November 2026. ShipAudit Lab is operated by ProbCapital. This page describes what we collect when you use our site, run a scan or order an audit. Contact: security@probcapital.com.
What we collect
- Brief submissions: your name, work email, application URL, the tier you select and any notes you add.
- Scans: the URL you submit and the scan results (findings about the target's public configuration).
- Monitoring: your URL and email address, plus the results of each scheduled rescan, so we can alert you to changes.
- Technical basics: our servers keep standard request logs (such as IP address and time) for security and rate limiting.
Why we collect it
To deliver the service you asked for: run scans, review and perform audits, send your confirmation, payment link, reports and monitoring alerts, and reply to your messages. We do not sell personal data, and we do not use your information for advertising.
Who processes it for us
We use a small number of service providers strictly to operate the service: an email delivery provider (Resend) to send confirmations, payment links, reports and alerts; internal messaging tools (Telegram) that notify our team when a brief arrives — these notifications include the brief's contact details so we can respond; and our hosting provider, which runs the site and its database.
What we store from your application
Scans observe your application's public surface only. We store the findings (configuration observations and evidence snippets needed to prove a finding). Evidence is redacted: secret values and personal data are never copied into reports. We do not log in during a free scan and we do not extract data from your application.
Retention and deletion
We keep brief, order and scan records while they are needed to provide the service, deliver retests and monitoring history, and meet legal obligations. You may ask us to delete your personal data at any time by writing to security@probcapital.com; we will delete it unless we must retain a record by law.
Your rights
You may request access to, correction of, or deletion of your personal data, and object to its processing, by writing to the address above. We respond within a reasonable time.
Cookies
This website does not use tracking or advertising cookies.
Changes
If we change this policy materially, we will update this page and its effective date.