Privacy Policy

Last updated: 13 November 2025

This Privacy Policy explains how Topscan.me, operated by METTY FSZO, Dubai Silicon Oasis, Techno Hub 1, 60th Street, Dubai, United Arab Emirates (“we”, “us”, or “our”), collects, uses, and protects your personal data when you use the Topscan.me platform (the “Service”).

By using Topscan.me, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

1. Who We Are

TopScan.me is an online service for vulnerability scanning and continuous security monitoring. This Policy explains what data we collect, how we use it, and your choices.

For privacy questions: legal@topscan.me

2. Data We Collect

We only collect data necessary to operate the Topscan.me platform efficiently and securely.

2.1. Data You Provide to Us

When you create an account or interact with Topscan.me, we may collect:

  • Account & Authentication: name, email (corporate only), password hash.
  • Billing & Payments: processed by Stripe. We receive payment identifiers, status, and (where permitted) the last 4 digits—not full card data.
  • Service Usage: targets you add (domains, IPs), scan schedules and settings, scan result metadata.
  • Communications: support tickets, feedback, survey responses.

We do not request or store sensitive personal data such as national IDs, government documents, or biometric data.

2.2. Information Collected Automatically

When you use the Service, we automatically collect limited technical data, such as:

  • Technical Data: IP address, user-agent, browser type, operating system, time zone, device and event logs (for performance and fraud monitoring).
  • Analytics/Marketing: cookies/pixels GA4.

3. How We Use Your Information

We use your data solely to operate and improve the Topscan.me platform. Specifically, we may use it to:

  • Create and manage user accounts and clients infrastructure.
  • Run vulnerabilities scanners, aggregate data, create reports and recommendations.
  • Process payments, and billing.
  • Provide customer support;
  • Comply with legal obligations.

We do not sell or rent your personal information to third parties.

3.1. Scan data

You control which targets (domains/IPs) are scanned and confirm you have the right to scan them. We process and store metadata of results to provide the service, logs, and support. Upon request, we can purge or minimize such data, subject to legal and contractual limits.

3.2. Payments

Payments are processed by Stripe. We do not store full card details. See the provider’s policy: https://stripe.com/legal/privacy-center.

4. Legal Basis for Processing

We process your data based on:

  • Contractual necessity: To provide the Topscan.me Service and fulfill our obligations;
  • Legitimate interest: To prevent fraud, ensure security, and improve platform functionality;
  • Legal obligation: When required by law or regulatory authorities;
  • Consent: When you voluntarily provide information or agree to receive

communications.

5. Data Sharing

We share user data only when necessary and under strict conditions:

  • Payment processors (e.g., banks, e-check systems) for handling payments;
  • Analytics providers for monitoring performance and detecting fraud;
  • Legal authorities if required to comply with UAE law or court orders.

All third-party partners are bound by confidentiality and data protection agreements.

6. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect their data.

7. Data Retention

We retain your data for as long as your account remains active and for as long as it is necessary to operate the platform, meet legal obligations, or resolve disputes.

  • Account & billing data: retained while your subscription is active and 3 months thereafter for accounting/legal requirements.
  • Scan logs/metadata: retained for 7 days (configurable per plan).
  • On request we may delete/anonymize data unless retention is required by law.

We may continue to store personal information for:

  • Record-keeping, analytics, and fraud prevention;
  • Compliance with tax and financial reporting requirements;
  • Defense against potential legal claims.

You may request deletion of your personal data or account at any time by contacting legal@mangoads.com.

Upon verified request, we will delete or anonymize your data within 30 business days, unless we are legally required to retain it.

This approach complies with GDPR’s data minimization and right-to-erasure principles while allowing lawful retention where necessary.

8. Cookies and Tracking

Topscan.me uses cookies and similar technologies to:

  • Maintain user sessions and preferences;
  • Analyze traffic and improve performance;
  • Detect suspicious or automated activity.

You can manage or disable cookies in your browser settings, but some platform features may not function properly without them.

9. Data Security

We use industry-standard security measures to protect your data, including:

  • Encrypted communication.
  • Access control and two-factor authentication for internal systems.
  • Logging, tenant isolation, and routine updates.
  • Regular security audits and data backups.

While we take all reasonable precautions, no online service can guarantee absolute security.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access a copy of the personal data we hold about you;
  • Request correction or deletion of inaccurate or outdated information;
  • Object to data processing or request restriction of processing;
  • Withdraw consent at any time (where applicable).

To exercise these rights, contact us at legal@mangoads.com.

We may require proof of identity before processing your request.

11. International Data Transfers

Your information may be transferred and stored outside your country of residence, including in the United Arab Emirates or other jurisdictions where we or our partners operate.

All transfers are performed in compliance with applicable data protection laws and contractual safeguards.

12. Third-Party Links

The Topscan.me website or dashboard may contain links to third-party sites.

We are not responsible for their privacy practices or content.

We encourage you to review their privacy policies before providing any personal data.

13. Governing Law

This Privacy Policy and any disputes arising from it shall be governed by the laws of the United Arab Emirates, as applied in the Emirate of Dubai.

Any dispute shall be subject to the exclusive jurisdiction of the courts of Dubai, UAE.

14. Updates to This Policy

Topscan.me may modify or update this Privacy Policy from time to time.

Updates will be published on topscan.me and become effective immediately upon posting.

Your continued use of the Service after such updates constitutes acceptance of the revised Policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, contact us at:

legal@topscan.me

METTY FSZO Dubai Silicon Oasis, Techno Hub 1, 60th Street Dubai, United Arab Emirates