Privacy Policy
SOCVault Ltd · Last updated: June 2026
1. Who we are
SOCVault Ltd is incorporated in England and Wales. We operate the SOCVault cybersecurity platform at socvault.io. References to "we", "us", or "our" in this policy refer to SOCVault Ltd.
2. Data we collect
We collect: (a) account data — your business email address, name, organisation, and phone number provided at sign-up; (b) scan data — the domain, IP addresses, and infrastructure details you submit for scanning; (c) usage data — page views, feature usage, and session information collected via standard server logs and analytics.
3. How we use your data
We use your data to: deliver and operate the SOCVault platform; send you scan results, alerts, and security reports; communicate product updates and service notices; comply with legal obligations including UK GDPR and law enforcement requests where required.
4. Legal basis (UK GDPR)
Our processing is based on: contractual necessity (to perform the scanning service you requested); legitimate interest (to improve the platform and detect abuse); and consent (for optional communications, where indicated). You have the right to withdraw consent at any time.
5. Data sharing
We do not sell your personal data. We share data only with: cloud infrastructure providers (AWS) under data processing agreements; our AI reasoning partner under an enterprise services agreement; payment processors as required to complete transactions; law enforcement or regulators when legally required.
6. Data retention
Account data is retained for the duration of your account plus 90 days after deletion. Scan result data is retained for 12 months by default; you may request earlier deletion. Log data is retained for 30 days.
7. Your rights
Under UK GDPR you have the right to: access, rectify, or erase your personal data; restrict or object to processing; data portability; and to lodge a complaint with the ICO (ico.org.uk). To exercise any right, email privacy@socvault.io.
8. Cookies
We use essential cookies for session management and optional analytics cookies. You may reject non-essential cookies via your browser settings.
9. Changes to this policy
We will notify you of material changes by email or in-product notice. Continued use of SOCVault after changes constitutes acceptance.
10. Contact
Privacy questions: privacy@socvault.io · SOCVault Ltd, England and Wales.