Privacy Notice — UAT
Version 2026-11-03 · 3 November 2026
Zentage Labs Pty Ltd, Australia operates the CyberScan365 user acceptance testing (UAT) service. For privacy questions, access, corrections, account closure or complaints, contact cs@zentagelabs.com. This notice covers this UAT service; it is not a statement about unrelated websites or services.
Information we collect
Registration collects your email address, full name, selected country/region, optional organisation and job title, policy acknowledgement versions and time, and optional product-update choice. Account settings also allow a timezone preference. Country/region is self-selected; it is not a verified address or a nationality check. We do not collect a phone number for verification in this release.
We store password hashes, account verification and security records, sessions, and MFA information if you enable it. We also process the targets, login credentials, API definitions, captured requests, scan findings and reports you choose to submit. These can include personal information; use test data and avoid submitting information you do not need or have permission to use.
Requests and security operations can involve IP addresses, browser/request information, timestamps, service logs and abuse-prevention records. The portal uses necessary session/security cookies and browser storage for preferences such as colour mode. Google reCAPTCHA also processes browser and device signals and uses a necessary security cookie.
Why we use it
We use information to create and verify accounts, provide requested assessments and reports, prevent abuse, secure and support the service, send account/security messages, investigate problems and meet applicable legal requirements. Full name and country/region are required for new registration. Organisation, job title, timezone and product updates are optional. Declining product updates does not affect access.
If you opt in, we may email product news. You can withdraw that preference in Settings → Profile or contact us. Essential verification, recovery and security emails are separate and cannot be turned off while using the account. We do not treat policy acknowledgement as permission for marketing.
Service providers and locations
The current application database and service run in AWS Sydney, Australia. AWS SES delivers account emails, and Google reCAPTCHA helps protect public account requests. Emails also pass through your email provider. Submitted scan traffic is sent to the targets and permitted login providers involved in the assessment. Optional connected services receive information when their configured features are used.
Provider operations, support and processing may involve locations outside Australia, including the United States. The Australian hosting region is not a guarantee that every provider processes information only in Australia. See Google reCAPTCHA data processing and AWS data privacy information. We may also disclose information where reasonably necessary to provide requested support, protect systems, or meet applicable legal obligations. We do not sell profile information.
Storage, security and retention
We use access controls and technical protections, including HTTPS, password hashing and encryption for saved scan credentials. No security measure guarantees absolute protection. Limit what you submit and keep your own credentials secure.
Email action links expire after 15 minutes; expired action records are removed during routine account-request cleanup. Persistent accounts, preferences, scan history, logs and backups do not currently have one universal automated deletion period in UAT. We retain information while needed for evaluation, support, security and applicable legal obligations, and review deletion requests individually. Closing an account does not necessarily immediately remove restricted backups or records required by law. Contact us to discuss what is held and the scope of a deletion request before submitting data with special retention requirements.
Your choices and concerns
You can correct profile details and product-update preferences in Settings → Profile. Email and password changes are under Account security. Contact us to request access to personal information, other corrections or deletion. We may need to verify identity and consider legal or security restrictions before acting. We will consider privacy complaints and work with you to address them. You may also contact the Office of the Australian Information Commissioner where relevant to your circumstances. Nothing in this notice limits rights under applicable privacy law.
Notice changes
We publish a version and date for changes and seek fresh acknowledgement where appropriate. Contact us if you need an earlier version.