Privacy Policy

1. Overview

This Privacy Policy explains how VibeGuard collects, uses, and shares information when you use our Service.

2. Information We Collect

We collect information you provide directly, such as your account email, profile information, organization name, and the assets you register for scanning (for example, domain hosts and repository identifiers).

We also collect usage and diagnostic data, such as request logs, timestamps, feature usage, and scan metadata (for example, check run status and finding summaries).

When you run scans, we may process source code, configuration, and deployed artifacts in order to detect security issues. We aim to avoid storing raw secrets; when possible, we store fingerprints, minimal evidence, and remediation context rather than the secret value itself.

3. How We Use Information

We use information to operate the Service, perform scans, generate findings, improve detection quality, prevent abuse, and provide support. If you enable billing, we use information to manage subscriptions and payments.

4. How We Share Information

We share information with service providers that help us run the Service (for example, hosting, storage, authentication, payments, and logging). For typical deployments, this may include Supabase (database/auth), Cloudflare (edge compute/queues), Stripe (billing), and GitHub (repo integration).

We may also share information if required by law or to protect the rights, safety, and security of our users and the Service.

5. Data Retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account data, subject to applicable requirements.

6. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is 100% secure.

7. Your Choices

You can access and update certain profile information in the Service. You can also disconnect integrations or stop scans by removing assets or disabling connections, as applicable.

8. Contact

Questions about privacy? Contact us at privacy@vibeguard.dev.

9. Changes

We may update this Privacy Policy from time to time. The "Effective date" above indicates when the latest version took effect.