Introduction

Kaybaum Solutions ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our code analysis service.

By using PViz, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Personal Information

We collect the following personal information:

• Account Information: Email address, password (encrypted)
• Payment Information: Processed by Stripe; we store only transaction IDs and receipt information
• Profile Data: User ID, account creation date, verification status

1.2 Repository Data

When you analyze a repository, we process:

• Repository URL: GitHub or GitLab repository location
• Source Code: Temporarily downloaded and processed in isolated containers
• Analysis Metadata: Functions, classes, imports, exports, file structures
• Access Tokens: GitHub personal access tokens (used once, never stored)

Important: Your source code is NEVER permanently stored. It is processed in memory within secure containers and deleted immediately after analysis completion.

1.3 Usage Data

We automatically collect:

• Log Data: IP address, browser type, timestamps, pages visited
• Device Information: Operating system, device type
• Service Usage: Number of analyses, token consumption, job status
• Performance Data: Analysis completion times, error rates

2. How We Use Your Information

We use collected information for:

• Service Delivery: Processing repository analysis requests
• Account Management: Creating and maintaining your account
• Payment Processing: Billing for tokens and repository analyses
• Communications: Sending transactional emails (verification, receipts, notifications)
• Service Improvement: Understanding usage patterns to enhance features
• Security: Detecting and preventing fraud, abuse, or unauthorized access
• Legal Compliance: Meeting regulatory requirements and responding to legal requests

3. Data Retention

We retain different types of data for varying periods:

• Account Information: Retained while your account is active, plus 30 days after deactivation
• Source Code: Deleted immediately after analysis (never stored permanently)
• Analysis Results: Retained indefinitely or upon request after you delete your account
• Payment Records: Retained for 7 years for tax and legal compliance
• Usage Logs: Retained for 90 days for security and debugging

4. How We Share Your Information

We do NOT sell your personal information. We may share data with:

4.1 Service Providers

• Stripe: Payment processing (PCI-DSS compliant)
• Cloud Infrastructure: Hosting and computing (AWS, DigitalOcean, etc.)
• Email Service: Transactional email delivery

4.2 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal obligations, court orders, or subpoenas
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted via HTTPS/TLS; passwords hashed with bcrypt
• Isolated Processing: Code analysis runs in sandboxed containers
• Access Controls: Role-based access to internal systems
• Data Deletion: Secure wiping of temporary files and containers

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights:

6.1 Access and Portability

You can access and download your analysis results at any time through the dashboard.

6.2 Correction

You can update your email address and account information through Account Settings.

6.3 Deletion

You can delete your account at any time. This will:

• Permanently delete your account information
• Delete all analysis results and job history
• Forfeit any unused tokens (non-refundable)
• Remove your data within 30 days

6.4 Object to Processing

If implemented in the future, you can opt out of non-essential communications by unsubscribing from marketing emails.

6.5 Lodge a Complaint

If you believe we have mishandled your data, you can contact us or file a complaint with your local data protection authority.

7. Cookies and Tracking

We use minimal cookies:

• Essential Cookies: Session authentication (required for service)
• Preference Cookies: Remember your settings
• Analytics: Basic usage statistics (anonymized)

We do NOT use third-party advertising or tracking cookies.

8. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your own. We ensure adequate safeguards are in place for such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our Service. Your continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

Email: mikemc@pvizgenerator.com

We will respond to your request within 30 days.