Privacy Policy

01. Information We Collect

We collect information you provide directly to us and information generated automatically when you interact with our platform:

• Account Information: When you register for an account, subscribe to a tier, or request verification, we collect your name, username, email address, password hash, and company details.
• Telemetry Target Data: Target domain names, server endpoints, and IP addresses you submit for uptime monitoring and public exposure analysis.
• Support Communications: Inquiries, verification documents, and correspondence sent to our support desk.
• Automated Device & Log Data: IP address, browser type, operating system, referring URLs, device identifiers, and timestamp metrics.

02. How We Use Your Information

We use the collected data strictly for legitimate operational purposes:

• To provision, maintain, and secure your cloud monitoring services, worker quotas, and dashboard access.
• To execute automated heartbeat checks, SSL/TLS certificate expiry alerts, and exposure notifications.
• To process billing transactions, generate electronic tax invoices, and verify merchant compliance.
• To prevent fraud, automated abuse, DDoS attacks, and unauthorized penetration testing.
• To communicate critical system status updates, security bulletins, and billing reminders.

03. Payment Processing & Financial Security

Your payment security is paramount. All credit card, debit card, and digital wallet transactions on LAZYBOT.NET are processed by certified **PCI-DSS Level 1** Service Providers, including **Stripe, Inc.** and **Paddle Payments**.

• No Stored Card Data: LAZYBOT.NET LLC never sees, handles, or stores your raw credit card numbers or CVV codes on our servers.
• Payment tokens, card brand (e.g. Visa, MasterCard), last four digits, and expiration dates are tokenized securely by the payment gateway and used solely to identify your billing profile on official electronic receipts.

04. Telemetry & Public Surface Intelligence

LAZYBOT.NET indexes internet-facing public DNS records, open service ports, and publicly visible configuration files for defensive cybersecurity awareness.

Our automated scanner does not perform intrusive vulnerability exploitation, brute-force attacks, or authentication bypass. All scanning activities operate strictly within publicly routable internet boundaries to help website owners identify inadvertent data exposures before they result in security incidents.

05. Bangladesh Protected Domain Shield

To support cybersecurity resilience in regional emerging markets, LAZYBOT.NET implements a strict **Domain Privacy Shield** for all .bd and .com.bd domains:

• Bangladesh domains are permanently filtered out of public aggregations, downloadable data feeds, and third-party exports.
• Detailed vulnerability readouts for .bd domains are restricted exclusively to verified website owners who prove administrative control.
• Free direct remediation support is provided to local verified administrators at zero charge.

06. Third-Party Service Providers

We share information only with trusted enterprise infrastructure providers who assist in operating our services:

• Payment Gateways: Stripe, Inc. and Paddle (payment authorization and tax invoicing).
• Cloud Hosting & CDN: Cloudflare (DDoS mitigation, SSL encryption, Turnstile bot verification) and cloud server hosting.
• Transactional Email: Automated notification dispatchers for critical downtime and billing alerts.

All third-party vendors are bound by strict data processing agreements requiring confidentiality, security safeguards, and prohibition from using your data for any other purpose.

07. Data Retention & Security Standards

We implement comprehensive technical and administrative security controls:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Access Controls: Administrative access to user databases and server clusters requires multi-factor authentication (2FA) and is restricted on a strict least-privilege basis.
• Data Retention: Account data is retained for the duration of your active subscription. You may request full account deletion at any time, subject to legal recordkeeping obligations for completed tax invoices.

08. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction (including the European Union, United Kingdom, and California), you possess specific statutory rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may correct inaccurate or incomplete account records.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal account data.
• Right to Restrict Processing: You may request that we limit how your data is processed.
• Right to Data Portability: You may receive your data in a structured, machine-readable format.

To exercise any of these rights, contact our Privacy Officer at [email protected]. We respond to all verified requests within thirty (30) days.

09. Cookies & Bot Prevention

We use strictly necessary functional cookies and security tokens:

• Session Cookies: Maintain your authenticated login status across dashboard pages.
• Security Verification: Cloudflare Turnstile tokens verify that automated requests originate from legitimate humans without invasive tracking.

We do not use third-party behavioral advertising cookies or cross-site tracking pixels.

10. Corporate Contact & Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact: