Privacy Policy

1. Introduction

Auditor ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, and authentication credentials when you register
• Usage data: pages visited, features used, and interactions with the Service
• Code and repository metadata submitted for security analysis
• Payment information processed securely through third-party providers
• Device and technical data: IP address, browser type, and operating system

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information
• Improve, personalize, and expand our Service
• Generate security analysis and recommendations
• Send administrative information such as updates and security alerts
• Respond to inquiries and provide customer support

4. Code and Repository Data

Code snippets and repository metadata submitted for security analysis are processed exclusively to provide the Service. We do not use your code to train AI models, sell to third parties, or disclose it beyond what is necessary to operate the Service. Processed code data is retained only for the duration required to complete the analysis and is deleted thereafter, unless you explicitly opt into storing audit history.

5. Sharing of Information

We do not sell your personal information. We may share information with:

• Service providers who assist in operating the Service under strict confidentiality obligations
• Law enforcement or government authorities when required by law or to protect our rights
• A successor entity in the event of a merger, acquisition, or sale of assets

6. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on the Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of the Service may not function properly.

7. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (TLS). Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time. We will comply within 30 days, except where retention is required by law.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict our processing of your data
• Receive a portable copy of your data
• Withdraw consent at any time where processing is based on consent

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after any modifications constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at privacy@auditor.dev.