Privacy policy

Last updated: October 2026

This policy explains what data we collect and how it is protected. Our core principle is simple: a security scanner that warehouses sensitive data is itself the biggest leak.

What we collect

• Account: your phone number, and optionally email and name, for sign-in and notifications.
• Uploaded code: the archive you submit for scanning; used only to run the scan and kept in your isolated space.
• Findings: scan results. For secrets we store only a redacted preview and a fingerprint — never the secret itself.

Protection

• The real secret is never stored in our database (redaction + fingerprint).
• Full tenant isolation; each workspace sees only its own data.
• Your code is never sent to any third party; processing is on our own infrastructure.
• Domain checks run only against a domain you have verified you own.

Data deletion

You can request deletion of your account and data via support@secures.ir.