Privacy Policy

1. Who We Are

Comorando is a data breach monitoring service operated at comorando.com. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

We collect the following information when you use our Service:

• Email addresses: Your account email and any email addresses you add for monitoring
• Payment information: Processed by PayPal — we do not store your card or bank details
• Usage data: API requests, scan logs, alert history
• Free scan data: Work and personal email addresses submitted for free scans

3. How We Use Your Information

We use your information to:

• Provide the breach monitoring service
• Send breach alert notifications to your account email
• Send your API key and account information after purchase
• Improve and maintain the Service
• Comply with legal obligations

4. Data We Do NOT Collect

• We do not store passwords
• We do not store payment card details (handled by PayPal)
• We do not sell your data to third parties
• We do not use your data for advertising

5. Third-Party Services

We use the following third-party services:

• HaveIBeenPwned (HIBP): We query this service with your email addresses to check for breaches. HIBP's privacy policy applies.
• PayPal: Processes all payments. PayPal's privacy policy applies to payment data.
• Supabase: Stores account and monitoring data on encrypted servers.

6. Data Retention

We retain your account data for as long as your account is active. Free scan data is retained for up to 90 days. You may request deletion of your data at any time by contacting us.

7. Security

We use industry-standard security measures including HTTPS encryption for all connections, encrypted database storage, and API key authentication. However, no system is 100% secure and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data

To exercise these rights, contact us at support@comorando.com.

9. Cookies

Our website does not use tracking cookies. We only use session-related functionality essential to the service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions or data requests: support@comorando.com