Privacy Policy

1. Who We Are

Heyva operates the website heyva.xyz and the HScan vulnerability scanning service. This policy explains how we collect, use, and protect your personal data.

2. Data We Collect

• Account data: Name and email address provided when you register or contact us.
• Domain data: The domain(s) you submit for scanning.
• Payment data: Payments are processed by LemonSqueezy. We do not store your card details.
• Usage data: Basic analytics such as pages visited, browser type, and referring URL.

3. How We Use Your Data

• To perform and deliver the requested vulnerability scan and report.
• To communicate with you about your order or support requests.
• To improve our services and website.
• To comply with legal obligations.

4. Data Sharing

We do not sell or rent your personal data. We may share data with trusted third-party services strictly necessary to operate HScan, such as payment processing (LemonSqueezy). These parties are bound by their own privacy policies.

5. Data Retention

We retain your data for as long as necessary to provide the service and comply with legal obligations. Scan data is retained only as long as necessary to deliver the report and is automatically deleted shortly after delivery, unless required for legal or operational reasons.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at support@heyva.xyz.

7. Cookies

We use minimal cookies necessary for the website to function. We do not use tracking or advertising cookies.

8. Changes

We may update this policy from time to time. The latest version will always be available at heyva.xyz/privacy.

9. Contact

For privacy-related questions, contact us at support@heyva.xyz.