Privacy policy
Last updated:
This page explains what CVE Patrol collects on this site, why, and how long it is kept. The site is published by {{company legal name}}, {{registered address}}, {{registration number}}.
What we collect
- Account: your email address, the plan you chose, your stack inventory (component names and versions) and billing details for paid plans.
- Technical logs: the web server keeps standard access logs (IP address, user agent, requested URL) for 30 days, for security and troubleshooting.
Why
- To provide the service, send your alerts and bill paid plans. Legal basis: performance of the contract.
- To keep the site running and secure. Legal basis: legitimate interest.
What we do not do
- No advertising trackers, no third party analytics cookies on this site.
- Your email is never sold or shared for marketing by others.
Retention
Account data is kept while your account is active and for 12 months after it is closed, unless you ask for deletion sooner. Invoices are kept for the legal retention period.
Your rights
You can ask for access, correction, deletion or portability of your data, and object to its processing, by writing to hello@cve-patrol.dev. You can also lodge a complaint with your data protection authority (in France, the CNIL).
Hosting
Data is hosted in the European Union by {{hosting provider and location}}.