Privacy Policy
Last updated: July 2026. This is a minimal policy stub — replace with counsel-reviewed text before production launch.
What we collect
When you run a local scan, findings stay on your machine until you choose to unlock or publish them. Account data (email, org) is handled by our auth provider. Repository metadata and findings are stored when you connect GitHub or publish scan results.
How we use data
To show impact evidence, send alerts, and (when enabled) open remediation PRs. We do not sell your data. We do not train models on your source code.
Contact
Privacy questions: privacy@vasdra.com (placeholder until legal entity is finalized).