Privacy Policy

What we collect

When you run a free scan, we collect the email address and the GitHub repository URL you submit.

We also collect basic, aggregate analytics about how this site is used — for example, which pages are viewed and general traffic sources. This analytics does not use cookies or tracking pixels, and it doesn't identify you personally.

We never store the source code of any repository we scan, and we never store the findings from a scan. Once a scan finishes and the results are shown to you, that data is gone — we don't keep a copy.

How we use it

We use your email and repo URL to deliver your scan results and to follow up about our services — for example, if you're a good fit for a paid review.

We don't use this information for anything else, and we don't build a profile of you beyond what's needed to respond to your inquiry.

Who we share it with

We work with a small number of service providers (“processors”) to run Hardened: Supabase (database hosting), Stripe (payment processing), and our email delivery provider. Each only receives what it needs to do its job — for example, Stripe sees payment details for a purchase, not your scan results.

We do not sell your data, to anyone, ever.

How long we keep it

We keep scan lead records (email, repo URL, and finding counts) for up to 12 months from your last contact with us, or for as long as you're an active customer plus a reasonable period afterward for accounting and legal records. After that, we delete them.

Your right to delete your data

You can ask us to delete your information at any time. Email support@hardenedaisecurity.com with the email address or repo URL you submitted, and we'll delete the corresponding records within 30 days.

Contact

Questions about this policy? Email support@hardenedaisecurity.com.