Privacy Policy

Account. When you sign in with Google we receive your name, email address, and profile picture.
Submissions. The repository URL or zip archive you submit, and — for private repositories — the access token you optionally provide.
Results. Findings, reports, short redacted code excerpts around each finding, and your chat messages about an audit.
Billing. Purchase records (pack, amount, payment reference). Card details go directly to our payment provider; we never see them.
There is no advertising, no tracking pixels, and no usage telemetry.

To run your audits, show you results, ground the audit chat in your findings, grant and track credits, and respond to support requests. Nothing else.

Detected credentials — API keys, tokens, private keys, and similar — are masked before results are written to our database and before any text is sent to an AI model. GitHub access tokens you provide for private repositories are encrypted at rest, used only to clone the repository, never sent to any AI model, and can be deleted on request.

Your code is analyzed inside an isolated container with networking disabled, a read-only filesystem, and no privileges. Your code is never executed, only read by scanners.

To generate plain-language explanations, redacted finding data and short redacted code excerpts are sent to our AI provider (Anthropic or OpenAI) under their API terms, which do not permit training on this data. Raw secrets are never included in these requests.

We do not sell or rent your data. It is shared only with the processors that run the service — cloud hosting, the AI provider above, and our payment provider — and when the law requires it.

Audit data is kept so you can revisit your results, for as long as your account is active. Email us to delete specific audits or your entire account and its data: ayaanmalik6099@gmail.com.

If this policy changes materially we will update this page and its date. Questions or requests: ayaanmalik6099@gmail.com.