Privacy Policy

1. What We Collect

Cyber Guardian Scan collects the minimum data needed to provide security scan results and protect the service from abuse.

• Code submitted for scanning: processed for security analysis and may be sent to a third-party AI provider.
• Scan metadata: scope, status, score, threat count, short threat summaries, timestamps, and one-way hashes used for caching and quota enforcement.
• IP-derived usage keys: IP addresses are hashed before being stored for rate limiting and quota windows.
• Product analytics events: anonymous page views, scan starts/completions/failures, selected scan scope, country-level geo headers, Sales clicks, and signup/contact events.
• Email address: collected only if you subscribe to updates.

2. Submitted Code

Submitted code may be sent to a third-party AI provider for analysis. Cyber Guardian Scan does not intentionally store full submitted code in the database. The server may temporarily process the code in memory and may cache a one-way hash for duplicate-scan caching.

3. What We Do Not Do

4. How We Use Data

• Provide scan verdicts, threat summaries, and recommendations.
• Prevent abuse through rate limits, monthly quota, and global daily caps.
• Generate aggregate scan statistics shown on the dashboard.
• Understand product usage, popular scan types, countries, and conversion from visit to scan or contact request.
• Improve detection quality and operational reliability.

5. Third-Party Providers

The service currently uses:

• Third-party AI provider: AI-powered code analysis. The current provider may include Anthropic. See anthropic.com/privacy.
• Vercel: hosting and serverless request processing.
• Supabase: database storage for quotas, scan statistics, dashboard data, contact messages, and anonymous product analytics.

6. Data Retention

• Submitted scan code: processed transiently and not intentionally stored by Cyber Guardian Scan.
• In-memory scan cache: up to 1 hour.
• Usage windows: expire automatically based on minute, hour, day, and monthly quota windows.
• Aggregate scan metadata: retained for dashboard and service analytics.
• Product analytics events: retained for product improvement and business reporting.
• Subscriber emails: retained until unsubscribe or deletion request.

7. Local Storage

The site may use browser local storage for language preference and client-side quota display. Server-side quota is enforced separately in Supabase.

8. Your Rights

Depending on your location, you may request access, correction, deletion, portability, or objection to processing. For privacy or support requests, contact support@cyberguardianscan.com. For larger scan-volume or business procurement requests, contact sales@cyberguardianscan.com.

9. Children

The service is not directed to children under 13. We do not knowingly collect data from minors.

10. Changes

If this policy changes, the updated version will be posted here with a new date.