Privacy policy

What we collect

• Your name, email address and a password hash, to run your account.
• The address of each app you add, the builder you used, and the results of each scan.
• Access you choose to grant for a Full Scan: a read-only repository token or GitHub App installation id, and a read-only database connection string.
• An audit log of actions taken in your account (orders, connections, scans, settings).

How the scanner treats your data

• Credentials are encrypted at rest. They are deleted when you press delete, after the rescan, or 14 days after you connected them, whichever comes first.
• The database check reads the catalog (tables, policies, functions) and never your rows. The anonymous probe requests at most one row per table using the public key your app already ships, records column names and a count, and never stores the values.
• Repository clones live only for the duration of a scan on the worker and are deleted afterwards. Only short previews of any secret found (first and last characters) are kept in the report.

Who else sees it

Payment details go to Paddle, our merchant of record, and never touch our servers. Report emails are sent through our email provider. If an AI rewrite of findings is enabled, the finding text (never credentials) is sent to the model provider to be rephrased. We do not sell data.

Your choices

You can delete stored access at any time from the app's page, turn two-factor authentication on in Settings, and ask us to delete your account and its data.