Operating draft

Privacy notice

This concise notice is an operating draft and has not received jurisdiction specific legal review.

Information collected

The pentest intake collects business contact details, company and application URLs, target date, testing reason, authenticated role count, scope categories, consent, and source attribution. Do not submit passwords, credentials, API keys, customer data, vulnerability details, or production secrets.

How VioletX uses it

VioletX uses the information to evaluate the request, prepare a potential scope, respond to the submitter, operate the intake service, and maintain business records.

Communication

When you submit the form, VioletX may contact you by email about the request. You may ask VioletX to stop marketing email at any time.

Sharing

VioletX does not sell intake responses. Information may be processed by providers supporting hosting, email, scheduling, and recordkeeping, subject to applicable agreements.

Retention and security

Responses are retained only as reasonably needed for the purposes above and protected using proportionate administrative and technical safeguards. No Internet service can guarantee absolute security.

Your choices

You may request access, correction, or deletion where applicable by contacting VioletX through violetx.com/contact.