Privacy

Last updated: 2026

1. Who we are

FlawFind (the “Service”, “FlawFind Djinn”) is owned and operated by REDEMPTIO CORP (DUNS 353551101). This policy explains what we collect and why.

2. What we collect

• Account data — the username, password hash, role, the profile details you provide at sign-up (name, company, role, country, address, purpose), and the authorized scope you declare (the domains/URLs you are permitted to audit).
• Contact & feedback messages — the name, email, company, and message you submit through the contact or feedback forms.
• Identity verification documents — the signed & stamped agreement, a government-issued photo ID, and a selfie holding that ID. These are collected before account approval and used only to verify your identity and your authority to authorize testing.
• Audit data — targets you configure and the findings, logs, and reports the engine produces for your audits.
• Technical data — standard server logs (IP address, timestamps) used for security and rate limiting.

3. What we do not do

• We do not sell your data.
• We do not run third-party advertising or cross-site trackers.
• Self-hosted deployments keep audit data on your own infrastructure.

4. How we use it

To operate and secure the Service, authenticate you, run the audits you request, respond to messages, and meet legal obligations. We do not use audit content for any other purpose.

5. Sharing

We share data only with infrastructure and model providers necessary to run the Service (for example, the LLM provider you configure), and where required by law.

6. Retention

Audit artifacts and messages are retained on your deployment until you delete them. Account data is retained while your account exists.

7. Your rights

You may request access, correction, or deletion of your personal data by contacting us via the contact page.

8. Security

Passwords are stored salted and hashed; the panel is login-gated and served over TLS. No system is perfectly secure, and you use the Service at your own risk.

9. Contact

REDEMPTIO CORP — see the contact page.

Mutual NDA

Template — not legal advice. Have counsel review and execute before use.

This Mutual Non-Disclosure Agreement (the “Agreement”) is entered into between REDEMPTIO CORP (“Company”) and the undersigned individual or entity (“Counterparty”).

1. Confidential Information

“Confidential Information” means non-public information disclosed by either party, including security findings, source code, architecture, credentials, audit reports, business, and technical information, whether written, oral, or observed.

2. Obligations

• Use Confidential Information solely to evaluate or perform the agreed engagement.
• Protect it with at least reasonable care, and no less than the care used for its own confidential information.
• Limit access to employees and contractors with a need to know who are bound by similar obligations.
• Not disclose it to any third party without prior written consent.

3. Exclusions

Obligations do not apply to information that is or becomes public through no fault of the receiving party, was already lawfully known, is independently developed, or is required to be disclosed by law (with prompt notice where lawful).

4. Term

This Agreement remains in effect for the engagement and for three (3) years after disclosure of the relevant Confidential Information.

5. Return or destruction

On request, the receiving party will return or destroy Confidential Information and confirm compliance in writing.

6. No license

No license or ownership of any intellectual property is granted by this Agreement.

7. Governing law

[Governing law and venue to be completed by the parties.]

8. Signature

To execute, contact us via the contact page and we will send a signable copy.