Privacy Policy
Privacy Policy
This Privacy Policy explains how SAKHAI handles information for the Cyber Score website, account dashboard, free checks, and professional report requests.
Last updated: 31 July 2026
SAKHAI ("we", "our", or "us") operates Cyber Score at sakhai.io. Cyber Score provides live public website security checks, Google sign-in, saved scan history, grouped websites, saved reports, score comparison, and professional report requests.
This policy describes the information we process, why we process it, and how to contact us about privacy or account deletion.
1. Information we collect
Depending on how you use Cyber Score, we may collect or process:
- account information from Google OAuth, such as email address, display name, profile image, Google account identifier, and authentication metadata;
- website and domain names you submit for checks or save in your account;
- scan history, security scores, category findings, saved reports, and related dashboard records;
- professional report request details, including domain, email address, company name, message content, and request metadata;
- technical information such as IP address, browser, device type, pages visited, approximate location, timestamps, and security or abuse-prevention signals;
- cookie consent choices and product analytics events when analytics cookies are accepted.
The free check uses publicly observable domain signals. You should not submit passwords, private documents, payment card data, or other highly sensitive information through public forms.
2. How we use information
We use information to:
- provide live public Cyber Score checks;
- create and maintain your account session;
- save websites, scan history, reports, and score comparisons in your dashboard;
- process professional report requests and related email communication;
- protect the website, forms, and APIs from abuse;
- understand product usage and improve the website experience;
- respond to support, privacy, and account deletion requests;
- comply with legal obligations and protect our rights.
3. Public scan data
Cyber Score checks public domain signals such as DNS records, HTTPS, HTTP security headers, public privacy links, public API indicators, and visible technology signals. The free check is informational and does not require access to your internal systems.
If you are signed in, scan results may be saved to your account so you can review history, compare scores, and open saved reports.
4. Service providers
We use trusted service providers to operate Cyber Score:
Google OAuth: sign-in authentication and account identity data.
Supabase: authentication, session handling, user account records, saved websites, scan history, stored scan results, reports, and database processing.
Cloudflare: hosting, DNS, security, traffic processing, logs, rate limiting, and Turnstile challenge verification when enabled.
PostHog: product analytics and usage events when analytics tracking is enabled by consent and configuration.
Resend: transactional email delivery and professional report request notifications.
We do not sell personal information. We may share information with providers only as needed to operate the service, respond to requests, prevent abuse, comply with law, or protect rights and security.
5. Cookies, Turnstile, and analytics
The website may use essential cookies or browser storage for security, authentication, session persistence, and cookie preference handling. Cloudflare Turnstile may process technical signals to verify that form submissions are legitimate.
PostHog analytics may be used to understand page views, product events, free check submissions, report request events, and general usage patterns. Analytics is used for product improvement, not to sell personal information.
6. Professional report requests and email
When you request a professional report, we process the submitted domain, email address, company name if provided, message if provided, and related technical metadata. Resend may process request email data to deliver notifications and responses.
7. Legal basis
Where applicable, we process information based on your request or consent, our legitimate interest in operating and securing the service, performance of a requested service, and compliance with legal obligations.
8. Retention
We retain account records, saved websites, scan history, reports, and report requests for as long as reasonably necessary to provide the service, maintain business records, resolve disputes, prevent abuse, or comply with legal obligations. You may request account deletion by contacting us.
9. International processing
Our service providers may process information in countries other than your country of residence. We use providers with established security and data processing practices, but we do not claim that every transfer is covered by the same local rules as your home jurisdiction.
10. Your rights and account deletion
Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing of your personal information.
To request account deletion or ask a privacy question, email contact@sakhai.io.
11. Security
We use reasonable technical and organizational measures to protect the service and submitted information. No website, email system, database, or internet transmission can be guaranteed to be completely secure.
12. Changes
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.