Privacy Policy

At Dizzy, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security platform. Please read this policy carefully to understand our practices regarding your data.

2.1 Information You Provide

• Account information (name, email, company details)
• Authentication credentials
• Communication data (support requests, feedback)
• Payment and billing information

2.2 Information Collected Automatically

• Attack simulation results and vulnerability findings
• Usage data and analytics
• Device and browser information
• IP addresses and location data

2.3 Application Security Data

As a penetration testing platform, we process data about your application necessary to perform and report on attack simulations, including target URLs, API endpoints, authentication scopes you grant, vulnerability findings, and proof-of-exploit artifacts.

We use the collected information to:

• Run continuous penetration tests against your application
• Generate and deliver vulnerability findings and proof-of-exploit reports
• Provide remediation guidance to your coding tools and team
• Verify that fixes close discovered attack paths
• Improve and personalize your experience
• Communicate with you about our services
• Process transactions and send billing information
• Comply with legal obligations

We may share your information in the following circumstances:

4.1 Service Providers

We may share data with third-party service providers who assist us in operating our platform, subject to confidentiality obligations.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We implement industry-standard security measures including encryption, access controls, secure data transmission, and regular security audits. However, no method of transmission over the internet is 100% secure.

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

Depending on your jurisdiction, you may have the following rights:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent
• Opt-out of marketing communications

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place in accordance with applicable laws.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

We use cookies and similar tracking technologies to improve your experience and analyze usage patterns. You can control cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the "Last updated" date.

If you have any questions about this Privacy Policy, please contact us.