Privacy Policy

At Calmcomet, we take your privacy and the security of your information seriously.

This Privacy Policy explains what information we collect, how we use it, and how we protect it when you visit calmcomet.co or request a free website security scan.

By using Calmcomet, you acknowledge the data practices described in this policy.

1. Information We Collect

When you use Calmcomet, we may collect the following information:

Information You Provide

• Website URL: The website address you submit for a security scan.
• Business Email Address: The email address you provide to receive your security report and related communications.
• Authorization Information: Your confirmation that you own the website or have permission to request its assessment.
• Communications: Information you share when contacting our team or responding to our emails.

Information Collected During Security Scans

When scanning a submitted website, we may collect publicly accessible technical information, including:

• Website security settings and configurations.
• Publicly visible software and technology details.
• Exposed files, API endpoints, and other publicly available resources.
• Potentially exposed API keys, credentials, or other sensitive information.
• Security findings and technical details needed to explain identified issues.

Our free scans focus on externally visible information. Deeper security testing requires additional verification and authorization.

Automatically Collected Information

When you visit our website, we may collect technical information such as your IP address, browser type, device information, pages visited, and basic usage logs.

2. How We Use Your Information

We use the information we collect to:

• Run requested website security scans.
• Identify possible security holes and exposed information.
• Prepare security reports with findings and recommended fixes.
• Email reports to the business email address you provide.
• Respond to questions and support requests.
• Prevent misuse, fraudulent submissions, and unauthorized security testing.
• Improve our website and scanning services.
• Send service-related notifications and, where permitted, product updates.

We do not use submitted websites as permission to conduct intrusive security testing. Such testing requires separate authorization.

3. How We Handle Security Scan Results

Security reports may contain sensitive technical information about your website.

We aim to limit the information collected and shared to what is necessary to identify and explain security problems.

Our intended handling practices are:

• Share reports only with the verified or authorized recipient.
• Redact exposed credentials and other sensitive values wherever possible.
• Avoid including complete secret keys or passwords in email reports.
• Restrict access to security findings to authorized personnel and necessary service providers.
• Avoid making individual security reports publicly available without authorization.

If deeper testing is requested, we may require website ownership verification before proceeding.

4. How We Share Information

We may share limited information with service providers that help us operate Calmcomet, such as:

• Website hosting and infrastructure providers.
• Email delivery services.
• Security scanning and technical processing providers.
• Analytics and operational service providers, where used.

These providers may process information only as necessary to support the services they provide to us, subject to applicable agreements and legal requirements.

We may also disclose information when required by law, to respond to valid legal requests, or to protect our users, services, and legal rights.

We do not sell personal information.

5. How We Protect Your Information

We take reasonable technical and organizational measures to protect information against unauthorized access, loss, misuse, or disclosure.

These measures may include access restrictions, secure communication methods, and controls for handling sensitive scan results.

However, no online service or method of data storage can guarantee complete security.

If you believe information handled by Calmcomet has been exposed or misused, please contact us.

6. Email Communications

When you request a security scan, we use your business email address to send your report and important updates about your request.

We may also send product news or promotional communications where permitted by law.

You can opt out of marketing emails at any time by using the unsubscribe link, where provided, or contacting us directly.

You may still receive essential communications related to a scan or service you requested.

7. Cookies and Analytics

Calmcomet may use cookies or similar technologies to support website functionality, understand usage, and improve the user experience.

Depending on the tools enabled on our website, this may include:

• Essential cookies needed for website functionality.
• Analytics technologies that help us understand website traffic and performance.
• Preference cookies that remember selected settings.

Where required by law, we will request consent before using non-essential cookies.

You can also manage cookies through your browser settings.

8. Your Privacy Rights

Depending on where you live, you may have the right to:

• Request access to personal information we hold about you.
• Ask us to correct inaccurate information.
• Request deletion of your personal information.
• Object to or restrict certain uses of your information.
• Withdraw consent where processing is based on consent.
• Request a portable copy of certain information.

To exercise your rights, email contact@calmcomet.co.

We may need to verify your identity before processing a request and will respond in accordance with applicable privacy laws.

9. Legal Basis for Processing

Where applicable privacy law requires a legal basis for processing personal information, we may rely on:

• Performance of a contract or requested service: To process your scan request and deliver your report.
• Legitimate interests: To operate and secure Calmcomet, prevent abuse, respond to inquiries, and improve our services, where those interests are not overridden by your rights.
• Consent: For optional marketing communications or non-essential cookies where consent is required.
• Legal obligations: Where processing is necessary to comply with applicable laws.

10. International Data Processing

Depending on our infrastructure and service providers, information may be processed in countries other than the one where you live.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.

11. Third-Party Websites

Calmcomet may contain links to third-party websites or services.

We are not responsible for their privacy practices, content, or security policies. We recommend reviewing their privacy policies before sharing information with them.

12. Children’s Privacy

Calmcomet is designed for businesses and website owners, not children.

We do not knowingly collect personal information directly from children under 16.

If you believe a child has submitted personal information to Calmcomet, please contact us so we can review the situation and take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy as our services, technology, or legal obligations change.

When we make changes, we will update the date at the top of this page. If required by law, we will also provide additional notice.

We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or how Calmcomet handles your information, please contact us.

Calmcomet

Website: https://www.calmcomet.co/

Email: contact@calmcomet.co