Terms of Use

1. Introduction

The CVE Yack platform is operated by Yack Security Inc. These terms explain how data is collected, used, and protected when using the platform.

2. Data collected

3. Use of data

The data is used exclusively for:

• Authenticating users (SSO or local account)
• Managing secure access to the platform
• Providing CVE search and notification features
• Improving the reliability and security of the service

The data is never used for advertising purposes.

4. Notifications

Users can receive email notifications about tracked vulnerabilities. Notifications can be disabled at any time from the account settings.

5. Cookies and local storage

The platform uses cookies or equivalent mechanisms solely for the following purposes:

• Maintaining user sessions
• Ensuring the proper functioning of the service

No third-party advertising or tracking cookies are used.

6. Data sharing

Data is not sold, rented, or shared with third parties, except:

• When required for authentication purposes (e.g., SSO provider)
• When required by law

7. Data retention

Data is retained only for the duration of the account's activity or as long as necessary to provide the service.

8. Account deletion

Users may request complete deletion of their account and associated data by writing to privacy@yack.one.

9. Security

Appropriate technical and organizational measures are implemented to protect data against unauthorized access, disclosure, or loss.

10. Legal basis for processing

Data is processed based on the user's consent and the legitimate interest related to the secure operation of the platform.