Privacy Policy
Last updated: 27 October 2026
Overview
CyberTrust is a passive, non-intrusive external security-rating service. We never scan your servers, attempt logins, or exploit vulnerabilities — we only read information about a domain that is already public.
What we collect
When you scan a domain we store its public DNS, TLS, web-header and exposure data, plus any contact details you give us (for example an email used for reports or domain verification). Account data such as your email and a hashed password is kept so your plan works.
How we use it
To produce your rating and fix guidance, send the reports and alerts you request, and run the service. We do not sell your data. Aggregated, non-identifying statistics may be used to improve the product.
Where your data is processed
The service runs on infrastructure in Hong Kong (Alibaba Cloud), and scan data is stored in a managed PostgreSQL database (Neon). Transactional email is delivered by Resend, payments are handled by Stripe, and DNS plus inbound email routing are provided by Cloudflare. Each of these providers processes data only to deliver the part of the service it is responsible for. We do not sell your data, and we do not use scan data to train third-party models.
Retention
Scan results are kept for your plan's history window and removed when you delete a domain or close your account. You can export or delete your data at any time from Settings.
Contact
Questions about your data? Email support@cybertrustpro.com and we will reply.