Privacy Policy
last updated · july 2026
What we collect
When you create an account we store your email address and an optional display name. When you run a scan we store the target URL, scan results, findings, and timestamps. We do not sell or rent your data to anyone.
How scan data is handled
- Detected secrets are truncated to the last 4 characters before storage. We never persist full API keys, tokens, or credentials.
- Raw evidence snippets are trimmed to the minimum needed to prove the finding.
- All scan records are encrypted at rest and served over TLS.
- You can delete any scan at any time from your dashboard; deletions are immediate and cascade to shared trust-report links.
- Public trust pages (if you enable one) contain only aggregate counts and a letter grade — never evidence or fix prompts.
How we use it
Your data is used only to operate VibeSafely: to run scans you request, show you the results, send you product notifications you have opted into, and improve the scanner over time.
Third parties
Authentication and storage are provided by Supabase. Email delivery is handled by our transactional email provider. Scanning traffic is issued from our infrastructure directly to the domain you scan.
Your rights
You can request export or deletion of your account data at any time by emailing security@vibesafely.app.
Contact
Questions? Return home or reach us at security@vibesafely.app.