Privacy Policy

Last updated: January 28, 2026

Key Privacy Commitments

  • Your code is never stored. We process it in memory and delete it immediately after analysis.
  • We don't sell your data. Your information is never sold to third parties.
  • GitHub tokens are never stored. Used once during analysis, then discarded.
  • You can delete everything. Full account deletion removes all your data within 30 days.

What We Collect

Account Info

Email address and encrypted password

Repository Data

Repo URLs you analyze and the resulting dependency graphs (not your source code)

Usage Data

Basic logs like IP address, timestamps, and number of analyses

Payment Info

Processed securely by Stripe (we only store transaction IDs)

How We Use Your Data

  • Process your repository analysis requests
  • Manage your account and billing
  • Send essential emails (receipts, security alerts)
  • Improve service performance and features
  • Prevent fraud and abuse

How Long We Keep Data

Source codeDeleted immediately
Analysis resultsUntil you delete them
Account info30 days after deletion
Usage logs90 days
Payment records7 years (legal requirement)

Who We Share Data With

We do NOT sell your data. We only share with:

Stripe

For payment processing (PCI-DSS compliant)

Cloud Providers

For hosting and infrastructure (AWS, DigitalOcean)

Legal Authorities

Only if required by law

Your Rights

Access: Download your analysis results anytime
Update: Change your email in account settings
Delete: Remove your account and all data within 30 days

Security

  • HTTPS/TLS encryption for all data transmission
  • Passwords hashed with bcrypt
  • Isolated sandboxed containers for code processing
  • Secure deletion of temporary files

Questions?

If you have questions about this policy or want to exercise your rights, contact us:

mikemc@pvizgenerator.com

We respond within 30 days.