CyberDoc is operated by Cintelis Pty Ltd (ABN to be confirmed), an Australian company. In this policy, "we", "us", and "our" refer to Cintelis Pty Ltd.
For privacy inquiries, contact us at: [email protected]
We collect the following personal information:
| Data Type | Purpose | Retention |
|---|---|---|
| Name, email, phone, company | Identify you for your report and follow-up; the email is checked for breaches and the phone number is validated (carrier, line type, fraud reputation) | 90 days (scan record) / CRM retention per CRM policy |
| Username / handle | Social profile sweep across public sites (may be derived from your email if left blank) | 90 days |
| IP address | Geo/ISP for your report and admin analytics, connection reputation (VPN/proxy/Tor), consent audit trail | 90 days (scan record) / 1 year (consent log) |
| Browser fingerprint data (canvas, WebGL, screen, fonts, plugins) | Browser privacy test — assessing your trackability | 90 days |
| WebRTC IP leak results | Detecting if your real IP is exposed | 90 days |
| Deep scan results (port scans, TLS, DNS, headers — paid Scan Lab) | Server-side security assessment of a domain you specify | 90 days |
| Device/browser info (user agent) | Consent audit trail | 1 year |
| Geo-location (country, city, approximate coordinates) | Admin analytics, report context | 90 days |
We collect and use your personal information for the following purposes under Australian Privacy Principle 6:
By submitting the intake form, you consent to the collection and use of your personal information as described in this policy.
For the browser penetration test, we obtain explicit, separate consent before running any scans. This consent is recorded with your IP address and timestamp for audit purposes.
You may withdraw consent at any time by contacting [email protected].
We use the following third-party services that may process your data:
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Cloudflare | Hosting, CDN, bot protection (Turnstile), geo/network lookup | IP address, geo, request data | Global (edge) |
| XposedOrNot | Email data-breach lookup | Your email address | Global |
| Have I Been Pwned (breach catalogue) | Breach metadata enrichment only | None — we read the public breach catalogue; no personal data is sent | Global |
| WhatsMyName (public dataset) | Social profile sweep across ~640 public sites | Your username | Global |
| Twilio | Phone number lookup (carrier, line type, SMS-fraud reputation) | Your phone number | United States |
| proxycheck.io | Connection / IP reputation (VPN, proxy, Tor, risk) | Your IP address | United States / United Kingdom |
| DeepSeek | AI diagnosis of your results | Your scan findings (breach, social and browser), which include your email address and username | People's Republic of China |
| Cintelis CRM | Lead management and follow-up | Name, email, phone, company | Australia |
| AWS (App Runner) | Server-side scanning infrastructure (paid Scan Lab only) | Target domains you submit for scanning | US East |
We do not sell, rent, or trade your personal information to any third party. Some of these providers are located overseas — see section 12 (Cross-Border Data Transfer).
Under the Australian Privacy Act 1988, you have the right to:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
We do not use third-party tracking cookies or advertising pixels.
The deep scan feature performs external security checks (port scanning, TLS analysis, DNS checks) against domains you specify. By entering a domain and clicking "Scan":
CyberDoc is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.
Your data may be processed overseas, including in the United States (Twilio, proxycheck.io, AWS), the United Kingdom (proxycheck.io), the People's Republic of China (DeepSeek, which performs the AI diagnosis and receives your scan findings including your email and username), and globally (Cloudflare edge network, XposedOrNot, WhatsMyName). By using CyberDoc you consent to this transfer under APP 8. If you would prefer your data not be sent to any of these providers, do not submit a scan; you may also contact us to discuss your options.
In the event of a data breach likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.
We may update this policy from time to time. The "Last updated" date at the top will be changed. Continued use of CyberDoc after changes constitutes acceptance of the updated policy.
For privacy questions, data access requests, or complaints:
Cintelis Pty Ltd
Email: [email protected]
Website: cintelis.ai