Privacy Policy

Last updated: [DATE]

What we collect

• Your email address and the Targets you submit.
• Payment confirmation from Stripe (we never see your card number).
• Scan results: findings, file paths and redacted evidence. Secrets are stored only as a short prefix and a one-way fingerprint.
• For free scans: the URL and your IP address, used for rate limiting.

What we don't keep

• Your source code: repositories are cloned to temporary storage and deleted when the scan ends.
• Database contents: we only count visible rows and never store row data.
• GitHub access tokens: used once to check repository permission, then discarded.

Retention

Reports are deleted 30 days after they are generated. Free-scan records are deleted after 30 days. Order and payment records may be kept as long as required for tax and accounting.

Processors

Cloudflare (hosting and database), Stripe (payments), GitHub (sign-in). The scanner runs on our own server. Reports are delivered as a private link on your order page; we do not send automated emails.

Your rights

Email clearancehq@mail.grokbot.com to access or delete your data at any time.