Privacy Policy
This page is a placeholder. Replace it with your own Privacy Policy, reviewed by a lawyer, before accepting customers.
Topics your Privacy Policy (and data processing agreement) should cover for this product:
- Who the controller is, and when you act as a processor for your customers (their clients' questionnaire answers, evidence files and code).
- What is collected: account details, client contact details, questionnaire answers, uploaded files, repository URLs, scan results, billing details (held by Stripe), logs.
- How source code is handled: scanned in an isolated environment; archives and repository tokens deleted after the scan; secret values redacted from results.
- Retention periods for reviews, evidence files and scan results, and how customers can request deletion.
- Sub-processors: hosting provider, Stripe (payments), email provider, GitHub API (repository checks).
- Where data is stored, international transfers, security measures and breach notification.
- Individuals' rights and how to contact you.