Privacy Policy

BugViso (“we,” “us,” or “our”) is committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at bugviso.com or use our automated website auditing, diagnostic, and reporting platform (collectively, the “Service”).

Please read this Privacy Policy carefully. By using BugViso, you acknowledge that you understand and agree to the collection and use of your information as outlined herein.

BugViso operates as the Data Controller for personal data collected through your account registration, platform navigation, and website usage.

For all purchase transactions and billing, our third-party merchant and reseller, Paddle.com (Paddle Payments Ltd and Paddle.com Market Ltd), acts as the independent Merchant of Record and Data Controller for customer billing information and payment processing.

We collect information in the following ways:

• Account Information: When you create an account, we collect your name, email address, password hash, role (e.g. personal or agency), and team preferences.
• Audit & Diagnostic Data: When you enter a URL to be scanned, our automated crawlers process the target domain's public HTML, CSS, JavaScript, performance timings, accessibility elements, security headers, and structured data.
• Usage & Technical Telemetry: We collect IP addresses, browser types, operating systems, referring URLs, device identifiers, and platform interaction events to maintain service performance and prevent abuse.
• Communications: When you contact us for support or feedback, we retain your email and correspondence history to resolve your request.

We use the data we collect solely for legitimate business and operational purposes, including:

• Conducting automated audits and generating download-ready diagnostic PDF reports;
• Authenticating users and securing account access;
• Fulfilling customer support requests and troubleshooting technical issues;
• Monitoring system health, uptime, and crawling capacity;
• Preventing malicious activities, automated denial-of-service, or violations of our Terms of Service;
• Delivering critical service notices, report completion alerts, and billing receipts.

If you are located in the European Economic Area (EEA) or UK, we process your personal data under the following legal bases:

• Performance of a Contract: Processing necessary to provide the services you requested, including running audits and generating reports.
• Legitimate Interests: Securing our infrastructure, preventing fraud, and optimizing the platform.
• Compliance with Legal Obligations: Retaining records where mandated by tax or corporate regulations.
• Consent: Where you have explicitly opted into analytics cookies or optional marketing updates.

We do not collect, process, or store your credit card or debit card numbers on BugViso servers. All payment transactions are handled through Paddle's PCI-DSS Level 1 compliant checkout infrastructure.

When a payment is completed, Paddle notifies BugViso via secure webhooks containing tokenized transaction identifiers, order status, purchase amount, and customer email address to unlock your report or activate your subscription. For details on how Paddle processes buyer data, please refer to the Paddle Privacy Policy .

We work with trusted third-party providers to operate BugViso:

• Paddle.com: Payment processing, checkout, invoicing, and Merchant of Record services.
• PostHog: Self-hosted/cloud privacy-focused product analytics (telemetry and feature usage).
• Google Analytics: Aggregated web analytics (loaded only after explicit cookie consent).
• Cloud Infrastructure Providers: Secure hosting and containerized browser audit execution.

We do not sell, rent, or trade your personal information to data brokers or third-party advertisers.

We use strictly necessary cookies to keep you logged in and preserve your session preferences. Optional analytics cookies help us understand aggregate traffic patterns.

You can manage or decline analytics cookies at any time via our Cookie Consent banner or by adjusting your browser cookie settings. Declining analytics cookies will not affect your ability to run audits or purchase reports.

We retain account details for as long as your account remains active. Website audit snapshots and generated PDF reports are retained to allow downloads and historical comparison, but can be permanently deleted upon request.

We implement industry-standard safeguards, including TLS 1.3 encryption for data in transit, encrypted storage for sensitive tokens, and role-based access controls to safeguard your data.

Depending on your location, you have the following rights regarding your personal information:

• Access & Portability: Request a copy of the personal data we hold about you;
• Rectification: Request correction of inaccurate or incomplete information;
• Erasure (“Right to be Forgotten”): Request deletion of your account and associated audit history;
• Restriction & Objection: Object to or restrict certain processing activities;
• Withdraw Consent: Withdraw previously given consent for non-essential cookies at any time.

To exercise any of these rights, contact us at privacy@bugviso.com. We respond to all verified requests within 30 days.

If personal data is transferred across borders, we ensure adequate protections are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives equivalent protection globally.

We may periodically update this Privacy Policy to reflect platform improvements or regulatory changes. Any modifications will be posted with an updated “Last updated” date. We encourage you to review this page periodically.

If you have questions, feedback, or privacy concerns, please contact our team: