Privacy Policy
Last updated: October 15, 2026
What we collect
- Waitlist: your email address and, if you provide it, a GitHub repo URL.
- Purchases: your email, the repo URL you enter, and payment details. Payments are processed by Stripe; we never see or store your full card number.
- Repository contents: we temporarily clone the public repo you submit in order to scan it.
How we use it
To deliver your report, contact you about your purchase or the waitlist, and handle refunds. We don't sell your data or use it for advertising.
Service providers
Stripe (payments), Resend (email and waitlist contacts) and Vercel (website hosting) process data on our behalf.
Retention
Cloned repository code is deleted after the scan. Generated reports and purchase records are kept to support re-delivery and refunds. Ask us to delete your data any time by replying to one of our emails.
Leaked secrets
If your report shows exposed keys, rotate them immediately. We only report the location, not the full secret value.