Privacy Policy

Last updated: December 2024

Introduction

AI Hardener ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security scanning platform and related services.

By using AI Hardener, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

  • Account Information: Name, email address, company name, and password when you create an account.
  • Payment Information: Billing address and payment method details (processed by our payment provider, Stripe).
  • Repository Access: OAuth tokens to access your code repositories for scanning purposes.
  • Support Communications: Information you provide when contacting our support team.

Information We Collect Automatically

  • Usage Data: Pages visited, features used, scan history, and interaction patterns.
  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Log Data: Server logs including access times, pages viewed, and referring URLs.

Code and Scan Data

When you run security scans, we temporarily process your code to identify vulnerabilities. We do not store your source code after scan completion. Scan results and findings are stored to provide you with historical data and trend analysis.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our security scanning services
  • Process transactions and send related information
  • Send you technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics).
  • Legal Requirements: When required by law or to protect our rights and safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • With Your Consent: When you have given us explicit permission.

Third-Party Services

Our service integrates with the following third-party services:

  • GitHub, GitLab, Bitbucket (repository access)
  • Stripe (payment processing)
  • Analytics providers (usage tracking)

Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication requirements
  • Secure development practices (we use our own tool!)
  • SOC 2 Type II compliance (in progress)

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

  • Account Data: Retained until account deletion
  • Scan Results: Retained for 12 months (configurable for Enterprise)
  • Source Code: Not stored; processed in memory only
  • Logs: Retained for 90 days

Upon account deletion, we delete your personal data within 30 days, except where retention is required by law.

Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing activities
  • Restriction: Request restriction of processing

To exercise these rights, contact us at privacy@aihardener.com.

Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you logged in
  • Remember your preferences
  • Analyze site usage
  • Improve our services

You can control cookies through your browser settings. Disabling cookies may affect functionality.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

We encourage you to review this policy periodically for any changes.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: