1. Who We Are

SHIELD AV ("we", "us", "our") operates the website at shield-av.online and the SHIELD AV browser extension. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and a hashed (encrypted) version of your password. We never store your plain-text password.

Payment Information: Payment is processed by Mobibox, our PCI DSS-compliant payment processor. We do not store your full card number, CVV, or expiry date on our servers. We receive only a transaction reference ID and your subscription status.

Usage Data: We collect anonymised data about how you use the Service, such as features used and error logs, to improve the product.

URLs Scanned: When you browse, your browser extension sends URLs to our server for threat-checking. These URLs are checked against Google Safe Browsing and are not permanently stored on our servers.

Technical Data: Standard server logs may include your IP address, browser type, and access timestamps. These are used for security and operational purposes.

3. How We Use Your Information

• To create and manage your account
• To process payments and manage your subscription
• To provide real-time URL scanning and threat protection
• To send transactional emails (account creation, password reset, subscription notices)
• To detect and prevent fraud and abuse
• To improve the Service based on anonymised usage analytics

We do not use your data for advertising, and we do not sell your data to third parties.

4. Third-Party Services

We use the following third-party services which may process your data:

• Google Safe Browsing API — URLs are checked against Google's threat database. See Google Privacy Policy.
• VirusTotal — Download URLs may be checked for malware. See VirusTotal Privacy Policy.
• Mobibox — Payment processing. Your card data is handled exclusively by Mobibox and is subject to their privacy policy and PCI DSS compliance.
• Google Fonts — Fonts are loaded from Google's servers. See Google Fonts Privacy.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

Server access logs are retained for up to 90 days for security purposes.

6. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• All data transmitted via HTTPS (TLS encryption)
• Passwords hashed using bcrypt with a cost factor of 12
• Database access restricted to the application server
• API access protected by rate limiting and authentication tokens

While we strive to protect your data, no internet transmission is 100% secure. We cannot guarantee absolute security.

7. Cookies and Local Storage

The SHIELD AV website uses browser sessionStorage and localStorage to maintain your login session. We do not use tracking cookies or third-party advertising cookies.

The payment iframe (provided by Mobibox) requires cookie access for 3D Secure authentication — this is a security requirement for card processing.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Portability — receive a copy of your data
• Object to certain processing of your data

To exercise any of these rights, contact us at support@shield-av.online.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the website. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

• Email: support@shield-av.online
• Website: shield-av.online