The short version: we only collect what we need to run your scan and send your report. Your code is deleted right after the scan.
What we collect
- Your email address and the repository URL you enter at checkout, so we can scan the right repo and send you the report.
- Payment details are handled entirely by Stripe. We never see or store your card number.
- Basic job records (repository URL, email, scan status, timestamps) so we can deliver your report, honor your free re-scan and handle support.
Your code
- We clone your public repository into a temporary, isolated sandbox, scan it, and delete it as soon as the scan finishes.
- We never store your code, never train AI on it, and never use or test any secret we find.
- Secret values never appear in your report, only where they are.
Who we share data with
- Stripe (payments) and our email provider (to send your report). Nobody else, and we never sell your data.
Your choices
Email support@vibehp.com to ask what we hold about you or to have your job records deleted.