AADSec
Home

Privacy policy

Version of 28 October 2026.

Who processes your data

DIENG TECH ET SERVICES, sole proprietorship (entreprise individuelle) of Abdoul Aziz Dieng, Dakar, Ouakam, Cité Asecna N°53, Senegal (RCCM SN DKR 2025 A 26363; NINEA 012313714). Contact: contact@aadsec.xyz.

What this site does and does not do

  • The site uses no advertising cookies and no analytics tool.
  • Appointment booking takes place on an external Cal.com page (Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, United States; contact: privacy@cal.com) linked from this site. Information you enter there to book a slot is processed by Cal.com under its privacy policy and shared with the publisher to hold the meeting.
  • The site does not collect your browsing data for its own account. However, the hosting provider (Vercel Inc., United States) processes technical logs required to serve and protect the pages: IP address, date and time, browser and device, requested page.
  • Fonts: the pages load fonts from Google (fonts.googleapis.com and fonts.gstatic.com). Your browser therefore sends your IP address to Google when displaying the pages.
  • Demo page: the /demo page displays a sample report hosted on GitHub Pages (github.io). GitHub receives your IP address when you open this page.
  • Language preference: your FR/EN choice is stored only in your browser's local storage (key aadsec-lang) to display the requested language. It stays in your browser and is not sent to the site.

Contact by email

If you write to contact@aadsec.xyz, we process your message and email address solely to reply to your inquiry and follow up on our exchanges. Incoming messages are forwarded through ImprovMX, delivered to a Gmail mailbox (Google LLC), and our replies are sent through SMTP2GO.

  • General inquiries and pre-contractual exchanges: retained for 12 months after the last exchange, the period needed to handle your request and follow up on a potential audit project (records tied to an order or invoice are retained for the statutory accounting and tax period).
  • Vulnerability reports: retained while the report is being investigated and remediated, and then for 24 months after closure, to maintain fix traceability and prevent regressions.

Email service providers:

  • ImprovMX Incorporated, 8 The Green, STE D, Dover, Delaware 19901, United States (forwarding). Contact: support@improvmx.com or at this postal address.
  • Google LLC (Gmail), 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (reception and replies). See Google's privacy policy.
  • SMTP2GO, operated by Sand Dune Mail Ltd, 96-106 Manchester Street, Christchurch 8011, New Zealand (sending). Contact: ticket@smtp2go.com.

Purchase

Purchases are made on the pages of Chariow, a service of Axa Zara LLC (a Delaware company, United States; Coastal Highway, Lewes, DE 19958; privacy contact: hello@chariow.com; support: support@chariow.com). You receive a payment link and pay directly on Chariow. Under its terms of service, Chariow acts as a software platform provider and neither as a payment service provider nor as a merchant of record: payment and billing services are provided by licensed providers (notably in partnership with MiMo Global Inc). Payment data is handled on its pages and by its providers, under their own policies.

The AADSec software and audit services

The software runs on your machine or in your CI. It does not send your source code to AADSec. Results leave your machine only if you choose to share them yourself (for example as part of an audit or support engagement). Any material you send us is used solely to deliver the agreed service and is never submitted to third-party artificial intelligence services without your prior written consent.

Transfers outside your country

Vercel, Google, GitHub, Cal.com, ImprovMX, Spaceship and Axa Zara LLC are based in the United States; SMTP2GO is based in New Zealand. Chariow states that it stores its data on servers located in Paris (France). These transfers occur only as necessary to serve the website, reply to your messages, schedule appointments or process an order at your request.

Your rights

You may request access to, rectification or deletion of your personal data, or object to its processing, by writing to contact@aadsec.xyz. Written requests are answered within one (1) month. You may also contact the data protection authority in your country; in Senegal, the Commission des Données Personnelles (CDP).

Governing law

This privacy policy is governed by Senegalese law. Any dispute falls under the jurisdiction of the courts of Dakar (Senegal), subject to any mandatory consumer protection provisions applicable in the consumer's country of residence.