SecurityChecks

Privacy Policy

Last updated: January 3, 2026

1. Introduction

SecurityChecks ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security scanning service and website at securitychecks.ai.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (optional)
  • Profile picture (if provided via authentication provider)
  • Organization name and details

2.2 Usage Data

We automatically collect information about how you use our service:

  • Scan results and security findings
  • Project configurations
  • API usage and request logs
  • IP addresses and browser information

2.3 Code Analysis Data

When you run security scans, we analyze your code to identify potential security issues. We process code snippets and file metadata to provide scan results. We do not store your complete source code on our servers.

3. How We Use Your Information

We use collected information to:

  • Provide and maintain our security scanning service
  • Process and display scan results
  • Send transactional emails (scan completions, team invitations)
  • Send optional marketing communications (with your consent)
  • Improve our service and develop new features
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Third-party services that help us operate (e.g., Clerk for authentication, Stripe for payments, Resend for email)
  • Team Members: Other members of your organization can view shared project data
  • Legal Requirements: When required by law or to protect our rights

5. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest for sensitive data
  • Regular security audits
  • Access controls and authentication
  • Secure API key management

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Scan results are retained for 12 months by default. You can request deletion of your data at any time by contacting us.

7. Your Rights (GDPR/CCPA)

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain processing of your data
  • Restriction: Request restricted processing

To exercise these rights, contact us at privacy@securitychecks.ai or use the account settings in your dashboard.

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies for advertising purposes. You can control cookie settings through your browser.

9. Third-Party Services

Our service integrates with third-party services that have their own privacy policies:

  • Clerk (Authentication)
  • Stripe (Payment Processing)
  • GitHub (Code Repository Integration)
  • Vercel (Hosting)
  • Resend (Email Delivery)

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through the service.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:

  • Email: privacy@securitychecks.ai
  • Website: https://securitychecks.ai/contact