Privacy Policy — NullCVE

Plain English summary: We collect only what we need to run the service. We do not sell your data. We do not share it with advertisers. Your tech stack configuration stays private. You can request deletion at any time.

Contents

01What We Collect
02How We Use It
03Data Sharing
04Data Retention
05Security
06Your Rights
07Cookies
08Children
09Changes
10Contact

01What We Collect

Data Type	Examples	How Collected
Account information	Email address, name	You provide when signing up
Tech stack configuration	Software components you add	You provide when configuring your feed
Contact form submissions	Name, email, message	You provide when contacting us
Usage data	Pages visited, features used	Automatically via analytics
Technical data	IP address, browser type	Automatically via server logs
Payment data	Billing address, last 4 digits	Via Stripe — we never store full card numbers

We do not collect sensitive personal information such as government ID numbers, health data, or financial account details beyond what is necessary for payment processing.

02How We Use It

Provide, operate, and improve the Service
Personalize your CVE feed based on your tech stack configuration
Send transactional emails — subscription confirmations, alerts you opt into
Respond to support requests and contact form submissions
Detect and prevent abuse, fraud, and security incidents
Analyze usage patterns to improve product features
Comply with legal obligations

We do not use your data to train machine learning models. We do not use your tech stack data for advertising targeting. We do not sell your data to any third party.

03Data Sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

Service providers: Payment processing (Stripe), email delivery, and analytics. These providers are contractually bound to use your data only to provide services to us.
Legal requirements: If required by law, court order, or government request.
Business transfers: If NullCVE is acquired, your data may transfer as part of that transaction. We will notify you before this happens.

Third-party services we currently use:

Service	Purpose	Privacy Policy
Web3Forms	Contact form submissions	web3forms.com/privacy
GitHub Pages	Website hosting	GitHub Privacy Statement
Cloudflare	DNS, email routing	cloudflare.com/privacypolicy

04Data Retention

Account data retained until you request deletion or account is terminated
Tech stack configuration deleted within 30 days of account deletion
Contact form submissions retained for up to 2 years for support purposes
Usage logs retained for up to 12 months then anonymized or deleted
Payment records retained for 7 years as required by tax law

05Security

We implement reasonable security measures including HTTPS encryption for all data in transit, secure credential storage, and access controls limiting who can access user data internally.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability in NullCVE, please report it responsibly to security@nullcve.io.

06Your Rights

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Portability: Request your data in a machine-readable format
Objection: Object to certain types of processing

To exercise any of these rights, email hello@nullcve.io. We will respond within 30 days. We honor GDPR and CCPA rights regardless of your location.

07Cookies

NullCVE uses minimal cookies — only session cookies necessary for the Service to function. We do not use third-party advertising cookies or tracking pixels.

08Children

NullCVE is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, contact us at hello@nullcve.io.

09Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by email.

10Contact

Questions about this Privacy Policy or your personal data:

hello@nullcve.io
NullCVE · nullcve.io