Legal // PRIVACY_v1.0

Privacy Policy

Last updated: September 2025 · Applies to all Flasploit accounts and services

Short version: We collect what we need to run the platform. We don't sell your data. We don't share it without a reason. That's it.

1. What We Collect

When you create an account or use Flasploit, we may collect:

Account details: name, email address, username
Usage data: prompts submitted, scripts generated, session timestamps
Technical data: IP address, browser type, device identifiers, crash logs
Communications: any messages you send to our support team

2. How We Use It

The data we collect is used exclusively to:

Operate, maintain, and improve the Flasploit platform
Authenticate your account and protect against unauthorized access
Respond to support requests
Monitor for abuse, spam, or violations of our Terms of Service
Send product-related communications (you can opt out any time)

3. What We Don't Do

To be direct about it:

We do not sell your personal data to advertisers or data brokers
We do not share your generated scripts with third parties
We do not use your prompts to train external AI models without explicit consent
We do not build ad profiles from your usage

4. Data Retention

We retain your account data for as long as your account is active. Script history is stored per-session and may be deleted by you at any time. On account deletion, we purge personal data within 30 days, except where retention is required by law.

5. Third-Party Services

Flasploit may integrate with third-party services (e.g., Google OAuth for login). These services operate under their own privacy policies. We recommend reviewing them independently. We are not responsible for the data practices of third-party providers.

6. Security

We use industry-standard measures to protect your data, including encrypted transmission (TLS), hashed password storage, and access controls. No system is 100% secure, but we take this seriously and act immediately on any detected breach.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us through our support channels. We'll respond within 30 days.

8. Cookies

We use minimal cookies strictly necessary for session management and authentication. We do not use tracking or advertising cookies. You can disable cookies in your browser, though this may affect platform functionality.

9. Changes to This Policy

We may revise this Privacy Policy over time. Material changes will be communicated via email or in-platform notice at least 7 days before taking effect.

10. Contact

Privacy concerns, data requests, or anything else — reach us through our support channels. We take these seriously and respond fast.