Privacy Policy
Last updated: July 2026
1. Information We Collect
Account information (email, name, organization), scan targets and results, API usage metrics, integration credentials (encrypted), payment information (processed by Polar, never stored by us), browser metadata for analytics, and cookies for session management.
2. How We Use Your Information
To provide and maintain the Service, process scans and deliver results, manage your subscription and billing, send service-related communications (scan completions, security alerts, billing notices), improve the Service, and comply with legal obligations.
3. Data Storage and Security
All data is stored in encrypted PostgreSQL databases on EU-based servers. Credentials are encrypted with Fernet symmetric encryption (AES-128-CBC). Scan data is encrypted at rest. API communications use TLS 1.3. We maintain SOC 2 Type II compliance practices.
4. Data Sharing
We do not sell your data. We share data only with: Polar (payment processing), Resend (email delivery), our infrastructure providers (database, hosting), and third-party services you explicitly connect via integrations. All third-party processors are bound by data processing agreements.
5. Your Rights
You have the right to access, export, correct, or delete your personal data at any time. You may revoke third-party integrations at any time. To exercise these rights, contact support@vergate.dev or use the account deletion feature in Settings. We respond to requests within 30 days.
6. Cookies and Tracking
We use essential cookies for session management (JWT tokens stored in HttpOnly cookies). We do not use third-party analytics, advertising cookies, or tracking pixels. The Service does not include third-party scripts or embedded trackers.
7. Data Retention
Active account data is retained while your account is active. Deleted accounts: data is purged within 30 days. Free scan data: retained for 90 days. Paid scan data: retained until you delete it or your subscription lapses (30-day grace period). Backup data: purged within 60 days.
8. Contact
Privacy questions? Contact our Data Protection Officer at privacy@vergate.dev. For general inquiries: support@vergate.dev.