Privacy

Privacy Policy

Plain English, because a policy nobody can read protects nobody.

Last updated: 15 July 2026. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. Who we are

Comptrusence is an Australian cybersecurity company based in Sydney, New South Wales. We provide automated vulnerability scanning, security tooling and cloud education. In this policy, "we" and "us" mean Comptrusence, and "you" means anyone who visits this site or uses our tools.

If you have a privacy question, email admin@comptrusence.com.

2. What we collect

If you only browse the site

You can read every public page, and use the QR code generator, without giving us anything and without creating an account. The QR generator runs entirely in your browser, and the text you enter is never sent to us.

If you create an account

  • Your name and email address.
  • A cryptographic hash of your password. We never store your password itself and we cannot read it.

When you use the tools

  • Website scanner: the URL you submit, and the findings we generate about it.
  • AWS Lab Checker: the resource identifiers you enter, such as a bucket name, instance ID or role name, the AWS region, and the pass or fail result. We do not receive your AWS credentials at any point.
  • Breach checker: the email address you submit. See section 5 for how we look this up without disclosing the full address.
  • SSL/TLS and DNS tools: the hostname or domain you submit.
  • Diagram Studio: the text prompts you enter.

Automatically

Our servers keep standard technical logs, including IP address, browser type, pages requested and timestamps. We use these to keep the service running, to investigate faults, and to detect abuse of the tools.

We do not use advertising trackers, and we do not sell or trade your personal information to anyone.

3. Cookies and browser storage

We do not use tracking or advertising cookies.

When you log in, we store a single session identifier in your browser. This is strictly necessary: without it we cannot keep you logged in. It is not used to track you across other websites, and it is removed when you log out.

If we later add analytics, we will update this policy and ask for your consent before any non-essential tracking is loaded.

4. Why we collect it

  • To create and secure your account, and to let you back in.
  • To run the scan or check you asked for, and to show you the result.
  • To give you access to the webinar library.
  • To apply fair usage limits, because our tools consume real compute and, for the Lab Checker, real AWS API calls.
  • To answer your enquiries.
  • To meet our legal obligations.

We only send you marketing email if you have separately opted in, and every such email includes an unsubscribe link that works.

5. Who we share it with, and where it goes

We store your data in Australian data centres. We do not sell your information. We share it only with service providers who help us run the platform, and only to the extent they need it.

  • Amazon Web Services (Australia, ap-southeast-2): hosting, storage and databases.
  • Content delivery networks and font providers: loading this site's fonts and scripts causes your browser to make a request to those providers, which necessarily discloses your IP address to them. Some are located overseas.
  • Breach data provider: the breach checker queries a third-party dataset using a partial hash of the address, so the full email address you enter is not disclosed to that provider. This provider may be located overseas, including in the United States.
  • AI processing: scan summaries and diagram generation are produced by a language model running on our own infrastructure. Your scan data is not sent to a third-party AI provider.

We may also disclose information where the law requires it.

6. How we protect it

We are a security company, so we hold ourselves to the standards we recommend. Passwords are hashed. Data is encrypted in transit and at rest. Access to production systems is restricted and logged. Our databases are not reachable from the public internet.

No system is perfectly secure. If an eligible data breach occurs, we will act in line with the Notifiable Data Breaches scheme and tell you and the Office of the Australian Information Commissioner where required.

7. How long we keep it

  • Account details: while your account is open, and for a reasonable period afterwards to meet our legal and record-keeping obligations.
  • Scan and lab results: so you can look back at your history. You can ask us to delete them.
  • Technical logs: a limited period for security and troubleshooting.

When you close your account, we delete or de-identify your personal information unless we are required to keep it.

8. Accessing and correcting your information

You can ask us what personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete your account and its data. Email admin@comptrusence.com and we will respond within a reasonable time, normally 30 days. We may need to verify who you are first.

9. Complaints

If you think we have mishandled your personal information, tell us first at admin@comptrusence.com and we will investigate and respond.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Children

Our services are intended for businesses and adults. We do not knowingly collect personal information from children.

11. Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date at the top. If the change is significant, we will tell account holders directly.