Last updated: August 24, 2026
Scope
This policy applies to https://pentestflow.ai. The PentestFlow product is self-hosted by you. We do not see, store, or process your engagement data, evidence, or reports.
What we collect on the website
- Analytics and conversion measurement via Google Tag Manager (container GTM-5Q7P69LF). Tags loaded through GTM may set cookies or similar identifiers (for example Google Analytics). See Google's privacy policy.
- Information you submit through contact forms (name, work email, company, team size, use case, optional message). This is delivered to yabetsworkaferahu@gmail.com.
What we do not collect
- No fingerprinting or session replay from PentestFlow itself. Third-party tags loaded through Google Tag Manager may set their own cookies as described above.
- We do not sell your data. Analytics tags configured in Google Tag Manager are processed by Google under Google's privacy policy.
Form submission processor
Contact form submissions are delivered via Formspree, which acts as a passthrough mailer to yabetsworkaferahu@gmail.com. They temporarily process your submission for delivery purposes only.
Your rights
You may request a copy or deletion of your contact-form submissions at any time by emailing yabetsworkaferahu@gmail.com. We respond within thirty days.
Contact
Privacy and security questions: yabetsworkaferahu@gmail.com. See also the trust center.