Privacy Policy
Last updated: October 26, 2026
This Privacy Policy explains how Niv Alcort, Israel ("Wardzo", "we", "us") collects, uses and protects personal data when you visit https://wardzo.com, join our waitlist, register early for a paid plan, run a free scan or use the Wardzo service. We are the data controller for the personal data described here.
1. Data we collect
- Waitlist and account data: your email address, optionally your website URL, the date and time you signed up and which form you used.
- Free scans: the website address you enter, the scan results, and a salted one-way hash of your IP address used for rate limiting. Anonymous scan reports are deleted after 30 days. Any secret found in a scan is stored only as a masked prefix, never in full.
- Early registration: your email, the plan and billing period you chose, number of websites, role and optionally your website.
- Service data: the website URLs you add, verification records, scan results, alert settings, and API / MCP usage logs.
- Billing data: payments are processed by Paddle.com, our Merchant of Record. Paddle collects your payment details; we receive only limited information such as your name, email, country, plan and transaction status. We never see or store your full card number.
- Technical data: IP address, browser type and request logs, kept briefly for security, abuse prevention and rate limiting.
- Support: the content of messages you send us.
The websites we monitor are scanned only for publicly available technical signals. We do not intentionally collect personal data of your website's visitors; if a scan incidentally captures personal data that is publicly exposed on your site, we use it only to report the exposure to you.
2. How we use data and our legal bases
- To provide and operate the Service and your account (performance of a contract).
- To send you early-access invitations, service alerts and transactional emails (contract / legitimate interest). Product updates and offers are sent only where permitted, and you can unsubscribe at any time.
- To secure the Service, prevent abuse and enforce our Terms (legitimate interest).
- To comply with legal, tax and accounting obligations (legal obligation).
- To improve the Service using aggregated, de-identified statistics (legitimate interest).
We do not sell your personal data and we do not use it for third-party advertising.
3. Cookies
Our marketing site does not use advertising or tracking cookies. The web application uses strictly necessary cookies to keep you signed in. If we add analytics in the future, we will use a privacy-friendly tool and update this policy.
4. Sharing
We share personal data only with service providers that help us run the Service, under appropriate data-processing terms: our hosting provider (Hostinger, servers located in the EU), Paddle.com (payments, taxes and invoicing), and an email delivery provider for transactional email. We may disclose data where required by law or to protect our rights and users.
5. International transfers
We operate from Israel, which the European Commission recognizes as providing an adequate level of data protection. Where data is transferred elsewhere, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. Retention
Waitlist data is kept until you unsubscribe or ask us to delete it. Account and scan data is kept while your account is active and deleted within 90 days after account closure, except where we must keep billing records longer by law. Uptime check history is kept for 90 days. Rate-limiting records are kept for 2 days. Security logs are kept for up to 30 days.
7. Security
We use encryption in transit (HTTPS), access controls, firewalls and least-privilege access to protect your data. No system is perfectly secure, and we will notify you and the relevant authorities of a data breach as required by law.
8. Your rights
Depending on where you live (including under the GDPR, UK GDPR, the Israeli Privacy Protection Law and US state laws such as the CCPA), you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. To exercise these rights, email privacy@wardzo.com. You may also lodge a complaint with your local data protection authority.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
10. Changes
We may update this policy and will post the new version on this page with a new "last updated" date. Material changes will be notified by email to account holders.
11. Contact
Niv Alcort, Israel. Privacy: privacy@wardzo.com · Support: support@wardzo.com.