Privacy Policy

AuditGate ("AuditGate," "we," "us," or "our") is a product of Zynterra Innovations Ltd. This Privacy Policy explains what information we collect, how we use it, and the choices you have, when you visit auditgate.io, join our waitlist, or use the AuditGate platform (together, the "Service").

AuditGate is currently in private beta and not yet open to the general public. This policy applies to our marketing site, waitlist, and to the product itself once it becomes generally available.

1. Information We Collect

Information you give us

Name, email address, company name, and any other details you submit through our waitlist, contact forms, or (once available) account registration.

API traffic and scan data

AuditGate's core function is monitoring API traffic that customers route through our proxy, and running active scans against endpoints customers authorize us to test. This may include request and response metadata, headers, and payload contents necessary to detect vulnerabilities and misconfigurations. Customers are responsible for ensuring they have the right to route this traffic to us and for configuring redaction of sensitive fields where available.

Technical and usage data

IP address, browser type, device information, pages visited, referring URLs, and similar analytics data collected automatically when you use our site or dashboard.

Cookies

We use essential cookies to operate the site and, where enabled, analytics cookies to understand aggregate usage. See Section 6 below.

2. How We Use Information

• To provide, maintain, and improve the Service, including running scans and generating findings and reports.
• To communicate with you about your waitlist position, account, or product updates.
• To detect, investigate, and prevent fraud, abuse, or security incidents.
• To comply with legal obligations.
• To analyze aggregate usage in order to improve product quality and performance.

We do not sell your personal information.

3. How We Share Information

We may share information with:

• Subprocessors — infrastructure and tooling providers (e.g. cloud hosting, email delivery, analytics) who process data on our behalf under contractual confidentiality and security obligations.
• Integrations you enable — e.g. sending alerts to Slack, or findings to Jira, when you configure those integrations.
• Legal and safety — where required by law, regulation, legal process, or to protect the rights, property, or safety of AuditGate, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

4. Data Retention

Findings and scan reports are retained according to your plan (see our pricing page for current retention windows). Waitlist and contact information is retained until you ask us to delete it or it is no longer needed for the purpose collected. Deleting a project removes the findings and reports associated with it.

5. Security

We use encryption in transit and at rest, access controls, and monitoring to protect the data we hold. No method of transmission or storage is 100% secure; see our Security Policy for more detail on our practices.

6. Cookies & Tracking

Essential cookies are required for core site functionality (such as keeping you signed in) and cannot be disabled. Where we use analytics cookies, you can control them through your browser settings; blocking cookies may affect site functionality.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law.

8. International Data Transfers

We may process and store information in countries other than your own. Where required, we rely on appropriate safeguards for cross-border transfers of personal data.

9. Children's Privacy

The Service is intended for businesses and professionals. We do not knowingly collect personal information from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where appropriate, we will provide additional notice.

11. Contact Us

Questions about this Privacy Policy can be sent to [email protected].