Privacy Policy

Last updated: October 2026

SkyQon ("SkyQon", "we", "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR). SkyQon is based in the European Union.

Data we collect

We collect information you provide directly — such as your name, work email, company and message when you request a scan, book a demo or contact us. When you use the platform, we process the domains you ask us to monitor and the publicly available trust signals associated with them. We also collect limited technical data (such as IP address and browser type) needed to operate and secure the service.

How we use your data

We use your data to deliver scans and reports you request, operate and improve the platform, respond to inquiries, send service and security communications, and meet legal obligations. We do not sell your personal data.

Legal bases

We process personal data on the bases of performing our contract with you, our legitimate interests in operating and securing the service, your consent where required, and compliance with legal obligations.

What SkyQon scans

SkyQon inspects publicly available information about the domains you choose to monitor — such as DNS records, published certificates and email-authentication policies. On Pro and above, an exposure scan also opens a plain connection to a fixed list of risky ports (such as remote desktop and databases) on hosts under domains you have proved you own, and only after an administrator has recorded consent; it never tries to log in or exploit anything. Monitoring needs no agent on your systems; the optional agents and the leaked-password audit script run only where you install them.

Organisations we contact first

Sometimes we write to an organisation that has not contacted us, to offer a free check of its public trust signals. We use only general business addresses the organisation publishes itself: the contact in its security.txt file, a role address such as info@ or privacy@ on its own website, or the address listed in a public register such as an EU trusted list. We record where each address was found. We never buy contact lists, and we never use a person’s own address. We do not send such emails to organisations in Germany. We rely on our legitimate interest in offering relevant security services to organisations (GDPR Art. 6(1)(f)). You can ask us at any time where we found your address. Every message lets you opt out in one step; after that we never contact you again about that domain, on any channel, and we keep the opt-out permanently so that it holds.

Analytics

We count visits to this website with Matomo, an analytics tool we run ourselves at analytics.skyqon.com. The figures stay with us. It sets no cookie and stores nothing on your device. We record which pages were opened, which links and buttons were used (for example a plan button or the free check), the website you came from, and your browser type and screen size. It does not read what you type into our forms. The free check and signup pages at dashboard.skyqon.com are counted the same way, by page and step only; the domain you check is never recorded there. As with any web request, our server receives your IP address; Matomo uses it to count one visit as one visit, not to find out who you are. We rely on our legitimate interest in knowing how our own website is used (GDPR Art. 6(1)(f)). If you object, write to [email protected].

Sharing and processors

We share data only with service providers who help us run the platform (for example hosting and email delivery), under contracts that require appropriate safeguards, and where required by law. We work to keep personal data within the European Union wherever practicable.

Retention

We keep personal data only as long as necessary for the purposes described here or as required by law, after which it is deleted or anonymized.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to certain processing. To exercise any right, contact us at the address below. You also have the right to lodge a complaint with your data-protection authority.

Contact

For privacy questions or to exercise your rights, contact [email protected].

This policy is provided for transparency and will be reviewed periodically. For binding terms specific to your contract, refer to your agreement with SkyQon.