SECIVY

Privacy Policy

Last updated: 8/19/2026

Data Controller

Entity: MEBIGX

Location: Prishtina, Kosovo

This security audit tool is operated by MEBIGX and complies with Kosovo's data protection legislation, including Law No. 06/L-082 on Protection of Personal Data and Law No. 06/L-081 on Access to Public Documents, under the supervision of the Agency for Information and Privacy (AIP).

Information We Collect

Scanner Data

  • URL you submit for scanning
  • Optional email address for results
  • Scan results (security grade, score, vulnerabilities, strengths)
  • Security headers (CSP, HSTS, X-Frame-Options status)
  • Domain name extracted from URL
  • Timestamp of scan

Analytics Data

  • Hashed IP address and user agent for unique visitor counting (no consent required)
  • Page visits for analytics (no consent required)
  • Consent preferences (your choices)
  • Google Analytics data (only with your explicit consent)

Legal Basis for Processing

We process your data in accordance with Kosovo's data protection legislation:

  • Law No. 06/L-082 on Protection of Personal Data: Governs personal data processing in Kosovo
  • Law No. 06/L-081 on Access to Public Documents: Governs access to public documents
  • AIP Oversight: Supervised by the Agency for Information and Privacy (AIP), Kosovo's national data protection authority

Our legal basis for processing your data:

  • Scanner service: Performance of contract
  • Analytics: Legitimate interest with your consent

How We Use Your Information

  • Provide security scanning services
  • Improve service quality and performance
  • Understand usage patterns (with consent)
  • Prevent abuse and ensure service security
  • Comply with legal obligations

Data Protection

We implement appropriate technical and organizational measures to protect your data:

  • Encryption in transit (HTTPS/TLS)
  • Input validation and sanitization
  • Access controls
  • Regular security updates

Data Retention

  • Scan results: Retained for service improvement and analytics
  • Analytics data: Daily analytics retained for 30 days, consent statistics retained for 90 days
  • Hashed visitor data: Daily hashes retained for 24 hours, then automatically deleted
  • Consent preferences: Stored locally in your browser for 12 months

Data Sharing

We do not sell your personal data. We share data only with:

  • Supabase: Database provider (EU/US servers)
  • Google Analytics: Only with your explicit consent
  • Legal authorities: When required by law

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place:

  • Supabase uses EU and US data centers with GDPR-compliant data processing agreements
  • Google Analytics processes data per their privacy policy (only with your consent)
  • Standard contractual clauses where required

Your Rights

Under Law No. 06/L-082 on Protection of Personal Data, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erasure of your data (right to be forgotten)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

Cookies

We use minimal cookies and localStorage for essential functionality and analytics. You can manage your preferences through our cookie banner:

  • Essentials: Required for authentication (dashboard login only) and consent preference storage
  • Server-Side Analytics: Privacy-first analytics using hashed IP addresses (no consent required)
  • Google Analytics: Third-party analytics (optional, consent required)

AIP Complaint Procedure

Users in Kosovo have the right to lodge a complaint with the Agency for Information and Privacy (AIP):

Complaints will be processed in accordance with Law No. 06/L-082 on Personal Data Protection.

Before Filing a Complaint

We encourage you to first contact our Data Protection Officer at privacy@mebigx.com. Most complaints can be resolved directly within 30 days of receipt.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us at privacy@mebigx.com

MEBIGX

← Back to Home