Pencheff
§ Legal

Privacy policy.

This policy describes how Pencheff collects, uses, and protects information when you use the website and platform.

Information we collect

We collect account information you provide (such as name, email, and organisation details). We may also collect product usage data (such as pages visited and actions taken) to operate and improve the service.

Security assessment data

When you run assessments, the platform may process target metadata, scan artefacts, and findings necessary to produce reports. You are responsible for ensuring you have authorisation to test any target you submit.

How we use information

We use information to provide the service (authentication, running assessments, generating reports), to maintain security and reliability, to respond to enquiries, and to improve product quality.

Sharing

We do not sell personal information. We may share data with service providers that help us operate the platform (for example, hosting and authentication), subject to appropriate safeguards.

Retention

We retain information only as long as needed for the purposes described above, and as required for legal, security, and audit obligations where applicable.