Privacy Policy

Data Collection

ASL V6 collects only the minimum data needed to provide security scanning services:

  • Email and name for account identification
  • GitHub username (when GitHub integration is used)
  • Repository contents temporarily during scans (not persisted)
  • Scan results and findings metadata

Data Security

All data is encrypted in transit (TLS 1.3) and at rest. Authentication uses JWT tokens with short-lived access tokens and refresh token rotation.

Secrets are managed via environment variables and never exposed to the client.

Data Usage

We do not sell or share your data with third parties. Your code is scanned in isolated ephemeral environments and discarded after scan completion.

Data Retention

Scan results are retained for 90 days. Account data is retained until account deletion. Account deletion is a soft-delete (deactivation) that removes access.