Privacy Policy

Last updated: 2026-10-24

This service is provided by CnJ Specialties LLC (Washington, USA), operating VibeScanHQ (“we”, “us”). This policy explains what we collect when you use vibescanhq.com and how we use it.

1. What we collect

• Email address. We use passwordless, email-only magic-link sign-in. We store your email and short-lived, hashed sign-in tokens and session records. We do not use passwords.
• URLs you submit and scan results. We store the URLs of apps you submit, your ownership/authorization confirmation (with IP address and timestamp), verification status, and the findings from each scan. Detected secrets are redacted before storage.
• Billing records. If you subscribe, we store your plan and Stripe customer and subscription IDs. We do not see or store your card number.
• Basic technical data. IP address and request logs used for security, rate limiting and abuse prevention.

2. How we use it

To sign you in, run the scans you request (including scheduled re-scans on paid plans), show and share reports you choose to share, send service emails (sign-in links, scan alerts, billing notices), process payments, and prevent abuse such as scanning apps without authorization.

3. Service providers

• Supabase — database hosting for accounts, apps and scan results.
• Netlify — website and application hosting.
• Resend — delivery of transactional email.
• Stripe — payment processing. Card details are entered on Stripe’s pages and handled under Stripe’s privacy policy; we never receive full card data.

4. What we don’t do

We do not sell or rent your personal data, and we do not use it for third-party advertising. We only scan apps whose owners request it.

5. Retention

We keep account data and scan history while your account is active. Sign-in tokens expire within minutes. You can ask us to delete your account and associated data at any time; billing records may be kept as required by law.

6. Your choices and rights

You can request access to, correction of, or deletion of your data, and you can cancel your subscription any time through the billing portal. Depending on where you live you may have additional rights under local law.

7. Security

Data is sent over HTTPS, stored with access controls, and server credentials are kept out of the browser. No system is perfectly secure, but we work to protect your information.

8. Children

VibeScanHQ is not directed to children under 13, and we do not knowingly collect their data.

9. Changes

We may update this policy and will change the date above when we do.

10. Contact

Questions or requests: support@vibescanhq.com