Privacy Policy

1. Introduction

This Privacy Policy explains how Kontra Siber Savunma Teknoloji Limited Şirketi ("Kontra", "we", "us") collects, uses and protects personal data when you use Vulmon Recon ("the Service"), including its self-hosted edition, Recon Essentials. It is separate from our Terms of Service.

2. Information we collect

• Information you provide, such as your name, email address and organization.
• Content you add, such as the domains and IP addresses you ask us to analyze, the cloud accounts you connect, and the results we generate for them.
• Usage and technical data, such as log records, IP address, and browser and device information, collected automatically when you use the Service.
• Billing information, such as your billing name, company name, billing address and any tax details you provide, which we use to manage subscriptions and issue invoices. Your payment card details are collected and processed entirely by our third-party payment provider and never reach our systems.

3. How we use your data

We use personal data to provide and secure the Service, authenticate you, process subscriptions, respond to support requests, comply with legal obligations, and improve the Service. We do not sell your personal data.

4. Legal bases

Where the KVKK (Türkiye) or GDPR (EU/EEA) applies, we process personal data on the bases of performing our contract with you, our legitimate interests in operating and securing the Service, your consent where required, and compliance with legal obligations.

5. Content you add and scanning

The assets and results in your account are processed on your behalf to deliver the Service. Discovered information may occasionally include personal data (for example, in public registration records). You are responsible for ensuring you are authorized to have that content analyzed, as described in our Terms of Service.

6. Sharing

We share personal data only with service providers that help us operate the Service — such as hosting, payment processing, analytics and anti-abuse providers — under appropriate confidentiality obligations, and where required by law. We do not sell personal data or share it for third-party advertising.

Our public contact and trial-request forms are protected by Cloudflare Turnstile, which checks that a submission comes from a real browser rather than an automated script. It is governed by Cloudflare's Turnstile Privacy Addendum.

7. Cookies and similar technologies

We use cookies that are necessary to sign you in and keep the Service secure, and limited analytics to understand and improve usage. You can control non-essential cookies through your browser.

8. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. When a trial or plan ends, or you ask us to delete your account, we keep its data for a limited time and then delete it; how this works today is described in Plans, trials and your data. Afterwards we keep only what we need for legal, accounting or security purposes, such as invoices, payment records and a short record of the account.

9. Security

We use technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We may process data on infrastructure located outside your country. Where required, we rely on appropriate safeguards for such transfers.

11. Your rights

Depending on your location, you may have rights to access, correct, delete or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at info@vulmon.com.

12. Children

The Service is intended for business use and is not directed to children under the age required by applicable law.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always the one posted on this page.

14. Contact

Questions about this policy or your personal data? Contact us at info@vulmon.com.