Legal Information

Privacy Policy, Terms of Service, and Legal Disclosures

Privacy Policy

Last Updated: July 1, 2026

1. Information We Collect

Novexis App ("we", "our", or "us") operates the IoT Security Audit Tool (the "Application"). The Application is designed with privacy-first principles. All network scan data, device information, and vulnerability assessments are stored exclusively on your local machine in an encrypted SQLite database.

We collect the following information only when voluntarily provided:

  • Account Information: Email address when you activate a license or contact support.
  • License Information: License key, subscription plan, and activation date for license validation.
  • Support Communications: Any information you provide when contacting our support team.
  • Usage Analytics (opt-in only): Anonymous, aggregated usage statistics to improve the product. This can be disabled at any time.

2. What We DO NOT Collect

We want to be explicitly clear: the IoT Security Audit Tool does NOT collect, transmit, or store the following:

  • Your network scan results or device information
  • IP addresses, MAC addresses, or hostnames discovered during scans
  • Vulnerability assessment data
  • Network topology or configuration data
  • Firmware versions or device serial numbers
  • Security event logs imported into the tool

All of the above data remains entirely on your local machine.

3. API Key Storage

When you configure API keys for DeepSeek AI or Google Gemini, these keys are encrypted at rest using Fernet symmetric encryption (AES-128 in CBC mode with PKCS7 padding) and stored locally. API keys are never transmitted to our servers.

4. Third-Party Services

The Application may connect to the following third-party services, depending on your subscription plan and configuration:

  • DeepSeek API: For AI-powered vulnerability analysis (Professional/Enterprise plans).
  • Google Gemini API: For backup AI analysis (Professional/Enterprise plans).
  • NVD (National Vulnerability Database): For live CVE lookups (Professional/Enterprise plans).

When using these services, vulnerability-related queries (not raw scan data) may be sent to the respective APIs. Please refer to each provider's privacy policy for their data handling practices.

5. Data Retention

All data is stored locally on your device. We do not maintain any of your data on our servers. You may delete your local data at any time by removing the Application's data directory.

6. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). Since we process minimal personal data (email address only for license activation), and all scan data remains local, the GDPR implications are limited. You have the right to:

  • Access any personal data we hold about you
  • Request correction or deletion of your personal data
  • Object to processing of your personal data
  • Request data portability

To exercise these rights, contact us at support@cs-e-shop.com.

Terms of Service

Last Updated: July 1, 2026

1. Acceptance of Terms

By downloading, installing, or using the IoT Security Audit Tool ("the Application"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Application.

2. License

The Application is licensed, not sold. Novexis App grants you a non-exclusive, non-transferable, revocable license to use the Application in accordance with your subscription plan. The Application is proprietary software, and all rights not expressly granted are reserved by Novexis App.

3. Subscription Plans

The Application is available under three subscription tiers:

  • Starter (Free): Limited to 10 devices, 2 scans/day, curated CVE database only.
  • Professional ($29.99/month): Up to 200 devices, 50 scans/day, live CVE lookups, AI agent, PDF reports.
  • Enterprise ($99.99/month): Up to 10,000 devices, unlimited scans, mobile companion, dedicated support.

Subscription fees are billed in advance. All fees are non-refundable unless required by applicable law.

4. Acceptable Use

You agree not to:

  • Use the Application to scan networks you do not own or have explicit permission to scan.
  • Reverse engineer, decompile, or disassemble the Application.
  • Resell, sublicense, or distribute the Application to third parties.
  • Use the Application for any illegal purpose or in violation of any applicable laws.
  • Remove or alter any proprietary notices from the Application.

5. Disclaimer of Warranties

THE APPLICATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. NOVEXIS APP DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. The vulnerability assessments and recommendations provided by the Application are informational and should not be considered a complete security solution.

6. Limitation of Liability

IN NO EVENT SHALL NOVEXIS APP BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. Our total liability shall not exceed the amount paid for the Application in the 12 months preceding the claim.

7. Third-Party Components

The Application may optionally integrate with Nmap, which is subject to its own license terms. Users are responsible for complying with Nmap's redistribution license if they choose to bundle it with the Application.

Additional Legal Disclosures

Trademarks

"Novexis App" and "IoT Security Audit Tool" are trademarks of Novexis App. All other product names, trademarks, and registered trademarks mentioned are property of their respective owners.

Export Compliance

The Application may be subject to United States export control laws. You agree to comply with all applicable export and re-export control laws and regulations.

Contact Information

For any legal inquiries, please contact us at:

Novexis App
Email: support@cs-e-shop.com
Phone: 800-414-1059
Website: https://iotsecurityaudit.cs-e-shop.com

Changes to These Terms

We reserve the right to modify these terms at any time. Changes will be effective immediately upon posting. Continued use of the Application after changes constitutes acceptance.