Legal

Privacy

Last updated 14 August 2026

What we hold, why we hold it, and what protects it.

What we collect

• Your account details: the email address you sign up with, your name, your position, your company and its location.
• The site you asked us to scan, and the proof that it is yours.
• Every scan we ran on it: the check log, the findings, and the evidence behind each finding.
• If you pay, the record of that payment. Card details go to Stripe and never reach us.

How scan evidence is protected

The evidence behind a finding is sealed to your account before it is stored, under a key scoped to you. It is encrypted at rest, and a leak of the database alone does not read it.

Your name, your company and your location are sealed the same way. The public verification page a badge links to carries the host, the verdict, the cadence and three counts, and no personal detail of any kind.

What we do with it

We use it to run your scans, to show you your reports, and to bill you if you buy something. We do not sell it and we do not share it for advertising.

Findings from your scan stay yours. When our attacker model invents a check that turns out to be worth keeping, we bank the method and not your data.

How long we keep it

Invoices are kept for as long as the law requires and are not deleted by a customer action.

Where it is stored

Payments run through Stripe. Frontier model calls go to our model provider, carrying the evidence a finding needs and no account details.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can close your account at any time.

A contact address is not published yet. Start a scan and the account area is where we answer.