Vibe App Scanner: Secure your vibe coded app

1. Introduction

Vibe App Scanner ("vas", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our security scanning service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. We use secure third-party authentication providers where applicable.

Scan Data

When you run a scan, we collect the target URL you provide and the publicly accessible information from that URL. This includes HTML content, HTTP headers, JavaScript files, and other publicly available resources. We only scan URLs you explicitly authorize.

Scan Results

We store the security findings from your scans so you can access them later. Scan results are associated with your account. If you choose to connect VAS to an AI application and approve access, VAS shares permitted scan and report information with that application as described below.

3. How We Use Your Information

•To provide and improve our security scanning service
•To communicate with you about your account and scans
•To detect and prevent abuse of our service
•To improve our scanning accuracy and reduce false positives

4. Data Retention

We retain your scan results for as long as your account is active. You can delete individual scans from your dashboard at any time. To delete your account and all associated data, contact us at admin@silexdev.com. When your account is deleted, all associated scan data is permanently removed within 30 days.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use third-party services for hosting, authentication, and payment processing. These services have their own privacy policies, and we encourage you to review them. We do not sell your personal information to third parties.

Optional AI Plugin Connections

When you connect your VAS account to an AI application and approve access, that application can request scan history, status, progress and reports that your account is permitted to access. Information shared can include scan identifiers, website origins, report links, coverage information, finding titles, severities, descriptions and remediation guidance. The plugin omits raw evidence and source files and applies redaction to known credential patterns, but this does not guarantee that all sensitive text can be identified. Only connect an AI application you trust to receive this information.

If you authorize a new scan through the plugin, the connected application sends your target URL and scan request to VAS. The scan uses your existing allowance and is subject to the VAS scanning terms. The plugin does not accept login credentials for target websites.

You can disconnect AI plugins to stop future access through those connections. Disconnecting does not delete or recall information already shared with the AI provider. Deleting a scan in VAS also does not delete copies already shared with that provider. The provider handles the information it receives under its own terms, privacy policy and account settings. Use its controls to manage information retained in its conversations.

7. Analytics

We use PostHog to understand how users interact with our service. This helps us improve features and fix issues. Analytics data is used in aggregate and is not sold to third parties. PostHog may use cookies to identify returning visitors and track sessions.

8. Your Rights

You have the right to access, correct, or delete your personal information. You can export your scan data from your dashboard. To delete your account or for any other privacy-related requests, please contact us at admin@silexdev.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at admin@silexdev.com