Privacy policy
Last updated 31 October 2026. The controller is SIMIONESCU IOAN-ALEXANDRU PERSOANĂ FIZICĂ AUTORIZATĂ (CUI 51830246, trade register no. F2025017945005), registered office B-dul Bucureștii Noi 136, ground floor, ap. 5, Sector 1, București, Romania. Contact for any privacy request: hello@wolfvalleyhq.com.
What we collect
Your email address and password hash (or the Google/Microsoft identity you sign in with), the domains you add or scan, the scan results and reports, your plan and billing status, and technical logs. For each free scan we log the account, the domain and the IP address, to show that scanning was requested by a signed-in user.
Why we use it
To run the scans you ask for, send your reports and alerts, take payment, keep the service secure and prevent misuse. The legal basis is performing the contract with you, our legitimate interest in security and abuse prevention, and legal obligations such as accounting.
Who processes it for us
Stripe (payments), Brevo (email, France/EU), Anthropic (the scan findings for your domain are sent to Claude to write the plain-language report), Have I Been Pwned and Google Safe Browsing (queried about your domain), crt.sh (public certificate logs) and our hosting provider. We do not sell personal data.
How long we keep it
For each domain we keep the most recent scans (currently the last 10) and delete older ones. Account data is kept while the account exists. Invoices are kept as long as the law requires. Free scan results live in your session and a short-lived cache.
Cookies
We use only cookies needed to sign you in and protect forms (session and CSRF). We do not use advertising or tracking cookies.
Your rights
You can ask to access, correct, export or delete your data, object to processing, or withdraw consent, by writing to hello@wolfvalleyhq.com. You can also complain to the Romanian data protection authority (ANSPDCP).