Privacy Policy

Last updated: December 10, 2025

1. Introduction

VulnStream ("we," "our," or "us") operates the VulnStream cybersecurity intelligence platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you sign in via LinkedIn, we receive your name, email address, and profile information from LinkedIn.
  • Chat History: We store your conversations with the VulnStream assistant to provide continuity and improve our service.
  • Communications: If you contact us, we may keep records of that correspondence.

2.2 Information Collected Automatically

  • Usage Data: We collect information about how you interact with our service, including queries made, features used, and session duration.
  • Device Information: Browser type, operating system, and device identifiers.
  • Log Data: IP addresses, access times, and pages viewed.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our cybersecurity intelligence service
  • Process and respond to your queries about vulnerabilities and threats
  • Send administrative information, such as updates and security alerts
  • Monitor and analyze usage patterns to enhance user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third parties that help us operate our service (hosting, analytics, email delivery).
  • Legal Requirements: When required by law or to protect our rights and safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Third-Party Services

Our service integrates with:

  • LinkedIn: For authentication. Their privacy policy applies to data they collect.
  • OpenAI: For AI-powered responses. Queries are processed through their API.
  • Vercel: For hosting and analytics.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. Chat history is retained to maintain conversation continuity. You may request deletion of your data at any time.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to or restrict processing of your information
  • Data portability

To exercise these rights, please contact us at the address below.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand how users interact with our service. You can control cookie preferences through your browser settings.

10. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@vulnstream.com