1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, company name, phone number
- Profile Data: Company description, services, team size, portfolio, address
- Project Data: Project descriptions, budget ranges, timelines
- Reviews: Ratings, review text, project details
- Payment Information: Processed securely through our payment provider (we do not store card details)
1.2 Information Collected Automatically
- Usage Data: Pages viewed, search queries, click patterns
- Device Data: Browser type, operating system, screen resolution
- Log Data: IP address, access times, referring URLs
- Cookies: Session cookies for authentication, analytics cookies for service improvement
1.3 Security Audit Data
We scan publicly accessible endpoints of provider websites to generate security grades. This data includes SSL certificate status, HTTP security headers, and publicly visible vulnerability indicators. We do not access private systems or data.
2. How We Use Your Information
- To provide and maintain our Platform
- To match Buyers with relevant Providers using AI algorithms
- To generate and display security audit reports
- To send service-related notifications and updates
- To improve our Platform through analytics
- To prevent fraud and enforce our Terms of Service
- To provide marketing tools for paid Provider plans
3. Information Sharing
We do not sell your personal information. We may share information with:
- Other Users: Profile information you make public (company name, services, reviews)
- Service Providers: Payment processors, email services, analytics tools
- Legal Requirements: When required by law, regulation, or legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
4. Data Security
We implement industry-standard security measures to protect your data:
- TLS/SSL encryption for all data in transit
- Encrypted database storage
- Regular security audits of our own infrastructure
- Access controls and audit logging
- SOC 2 compliant hosting infrastructure
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we retain anonymized data for analytics and comply with legal retention requirements. You may request full data deletion by emailing contact@securefirst.dev.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate personal data
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Objection: Object to certain processing of your data
- Restriction: Request restriction of processing
To exercise these rights, contact us at contact@securefirst.dev. We will respond within 30 days.
7. Cookies
We use the following types of cookies:
- Essential: Required for Platform functionality (authentication, security)
- Analytics: Help us understand usage patterns (can be opted out)
- Preference: Remember your settings and language choices
You can manage cookie preferences through your browser settings.
8. International Data Transfers
Your data may be processed in countries other than South Korea, including countries where our hosting providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
9. Children's Privacy
Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance.
11. Contact Us
For privacy-related inquiries:
Data Protection Officer: privacy@securefirst.dev
General Support: contact@securefirst.dev
Address: 53 Biraeseoro, Daedeok-gu, Daejeon 306, South Korea