> For the complete documentation index, see [llms.txt](https://shellzerox.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://shellzerox.gitbook.io/docs/legal/privacy-policy.md).

# Privacy Policy

Explain how personal information, account details, technical data, and security scan information may be handled when using SHELLZERO X.

***

### Overview

This page outlines privacy considerations for users of SHELLZERO X, including information that may be provided when using the platform, technical data associated with website access, and information submitted for security assessments.

The practices described here must be confirmed against the platform's actual data collection, processing, storage, and retention arrangements before this page is published as an official privacy policy.

### Information That May Be Processed

Depending on the platform's implementation and the features used, information may include the following categories.

| Information Category     | Examples                                                                                           |
| ------------------------ | -------------------------------------------------------------------------------------------------- |
| Account Information      | Name, email address, and account identifiers provided during registration, where applicable.       |
| Technical Information    | Browser type, device information, IP address, timestamps, and diagnostic logs, where collected.    |
| Scan Inputs              | Domain names, website addresses, or other target information submitted for assessment.             |
| Scan Results             | Detected security configurations, vulnerability indicators, and generated reports.                 |
| Support Communications   | Messages, error descriptions, and attachments submitted when requesting assistance.                |
| Notification Information | Destination details or preferences required for supported notification features, where applicable. |

This list describes potential data categories and does not confirm that SHELLZERO X collects every item listed.

### How Information May Be Used

Information processed by the platform may be used for purposes such as:

* Providing requested website and domain security assessments.
* Displaying and maintaining scan results.
* Operating account and domain verification functions, where available.
* Diagnosing technical issues and improving platform reliability.
* Delivering supported alerts or service communications.
* Detecting misuse and protecting platform infrastructure.
* Responding to support requests.

The actual purposes and legal grounds for processing must be specified in the verified official privacy policy.

### Security Scan Data

When using security scanning features, users may submit information about a website or domain for assessment.

Scan results may contain technical details about publicly observable infrastructure, security configurations, software versions, DNS records, and potential vulnerabilities.

Users should:

* Submit only information they are authorized to provide.
* Avoid including passwords, private keys, access tokens, or unrelated personal information.
* Share reports only with appropriate recipients.
* Consider whether scan results contain sensitive information before distributing them.

The platform's actual storage, access, and retention practices for scan inputs and reports should be documented once confirmed.

### Cookies and Similar Technologies

Websites may use cookies or similar technologies to support essential functionality, maintain sessions, remember preferences, or understand website performance.

The cookies and technologies used by SHELLZERO X, their purposes, and any available user controls must be confirmed before specific practices are stated in this policy.

### Third-Party Services

Some platform functions may depend on external infrastructure, data sources, hosting providers, or notification services.

Where third parties process information on behalf of or in connection with SHELLZERO X, the official policy should identify the relevant categories of providers, the information involved, and any applicable disclosures.

External websites and services may have their own privacy practices.

### Data Retention

Information should be retained only in accordance with the platform's actual operational requirements and applicable legal obligations.

The specific retention periods for account information, scan records, technical logs, support communications, and other data must be confirmed by the platform operator. This page does not establish a retention period.

### Data Security

SHELLZERO X should document the technical and organizational safeguards actually used to protect information against unauthorized access, loss, alteration, or disclosure.

No security measure can guarantee absolute protection. Users should also protect their account credentials and avoid submitting secrets or sensitive information unnecessarily.

### User Privacy Rights

Depending on applicable law and the platform's role in processing personal information, users may have rights concerning access, correction, deletion, or other forms of control over their data.

The applicable rights, eligibility requirements, request procedures, and response timelines must be confirmed in the official policy.

### Children's Privacy

The platform's intended age range and procedures for handling information relating to children should be specified in the official privacy policy, consistent with applicable law.

No specific age threshold or data-handling commitment is established by this documentation draft.

### Policy Updates

The official privacy policy should state how changes are communicated, when revised terms take effect, and where users can find the latest version.

Users should consult the current published policy for the applicable terms.

### Privacy Questions

For questions about privacy or data handling, contact:

**Email:** <dev@shellzerox.org>

**Website:** <https://shellzerox.org/>

Before sending a request, avoid including passwords, private keys, wallet recovery phrases, or authentication tokens.

### Important Notice

This page is a draft for documentation purposes. It is not a verified statement of SHELLZERO X's actual privacy practices and should not be published as the final legal Privacy Policy until reviewed and approved by the platform operator.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://shellzerox.gitbook.io/docs/legal/privacy-policy.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
