Privacy Policy

1. Introduction

Vibeship ("we", "our", or "us") operates Vibeship Scanner. This Privacy Policy explains how we collect, use, and protect information when you use our security scanning service.

2. Information We Collect

2.1 Repository Data

When you submit a repository for scanning:

• Repository URL: We store the URL of repositories you scan
• Source Code: We temporarily clone and analyze public repository code. Source code is NOT permanently stored and is deleted after scanning completes.
• Scan Results: We store scan results including identified vulnerabilities, severity levels, and file locations to provide you access to your scan history

2.2 Automatically Collected Information

• Browser Information: We may collect browser type, device type, and operating system
• Usage Data: Pages visited, time spent, and interaction patterns
• IP Address: For security and analytics purposes
• Local Storage: We use browser local storage to remember your recent scans for convenience

3. How We Use Information

We use collected information to:

• Perform security scans on submitted repositories
• Display scan results and maintain scan history
• Improve and optimize our scanning algorithms
• Monitor and prevent abuse of the Service
• Analyze usage patterns to improve user experience
• Comply with legal obligations

4. Data Retention

• Source Code: Temporarily processed during scanning only; not permanently stored
• Scan Results: Retained to provide scan history functionality
• Usage Data: Retained for analytics and service improvement

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help operate our infrastructure (hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

6. Data Security

We implement reasonable security measures to protect your information, including:

• Encrypted data transmission (HTTPS)
• Secure cloud infrastructure
• Access controls and authentication
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact us at vibeshipco@gmail.com.

8. Analytics and Tracking

We do not use cookies. We use Amplitude for anonymous analytics, which stores a device identifier in your browser's local storage (not cookies). This helps us understand how users interact with the Service.

Data collected by Amplitude includes:

• Page views
• Scan events (started, completed, failed)
• Repository URLs scanned
• Aggregate finding counts (not specific vulnerability details)

This data is anonymous and cannot identify you personally. For more information, see Amplitude's Privacy Policy.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

10. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

11. International Users

If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other countries with different data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date.

13. Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

vibeshipco@gmail.com