Privacy Policy

Last updated: July 8, 2026

1. Information We Collect

We collect minimal information required to run the Service. This includes your email, name, profile details during sign-in (via Google/Firebase Auth), and payment transaction details.

2. Source Code Security

Your source code is never stored long-term. When you trigger a scan:
• The repository is cloned onto an isolated, temporary workspace using standard HTTPS/git.
• We extract risk patterns and generate findings using our AI pipeline.
• Within 1 hour, the temporary clone is entirely deleted from our servers.

3. Data Shared with LLMs

During the Stage 1 and Stage 2 scans, code snippets are securely transmitted to LLM API endpoints (DeepSeek) via encrypted SSL connections. Our contract parameters ensure your snippets are NOT used to train future public language models.

4. Security Measures

We employ strict server sanitization, SSRF filters to block internal network access during cloning, and secure environment tokens to protect all user transaction and scan database records.