Privacy Policy

Last updated: July 9, 2026.

1. Who controls your data

The data controller is Oleh Tatarynov, a sole proprietor, of Kherson, Ukraine(“EXOINTEL”, “we”). Contact us about privacy at exocriador@gmail.com.

2. What we collect

• Account data: email address, hashed password, and account role.
• Session data: a signed session cookie used to keep you logged in.
• Usage data:which plan you're on and how much of each metered tool (AI queries, scans, lookups) you've used this month, to enforce plan quotas.
• Tool queries: the targets you submit to recon tools (domains, IPs, usernames) are sent to the relevant lookup provider to fetch results; we do not sell this data.
• Payment data: we never see your card details — subscription payments are handled entirely by Paddle (see §4).

3. Why we process it (legal basis)

Account and usage data: performance of our contract with you (providing the service you signed up for). Payment data: performance of contract and our legitimate interest in fraud prevention. We do not use your data for advertising.

4. Who we share it with (processors)

• Paddle.com Market Limited — payment processing and billing (Merchant of Record) for paid subscriptions.
• AI provider — if you use the AI assistant, your query is sent to the configured language-model provider to generate a response.
• Public data-source APIs the recon tools call on your behalf (e.g. DNS resolvers, WHOIS registries, certificate-transparency logs) — only the target you look up is sent, never your account details.

We do not sell personal data to third parties.

5. International transfers

Some processors above may process data outside your country of residence. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

6. Retention

We keep account and usage data for as long as your account is active, plus a limited period afterward for legal and accounting purposes. You can request deletion at any time (§7).

7. Your rights

Subject to applicable law — including the GDPR if you're in the EU/UK, and Ukraine's Law “On Personal Data Protection” as the controller's home jurisdiction — you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email exocriador@gmail.com. If you're in the EU/UK, you also have the right to lodge a complaint with your local data-protection authority.

8. Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising or tracking cookies.