Privacy Policy

1. Introduction

This Privacy Policy explains how Vaktex (“we,” “our,” or “us”) collects, uses, stores, and protects your information when you use our code scanning services, websites, APIs, and related products (the “Services”).

By using the Services, you agree to the collection and use of information as described in this Privacy Policy.

2. Information We Collect

Account Information

When you create an account, we may collect:

• First name
• Last name
• Age
• Mailing address
• Email address
• IP address
• Country or region

We collect this information for legitimate business purposes, including fraud prevention, legal compliance, account security, tax obligations where applicable, and providing the Services.

Code Signatures and Samples

Your source code is never collected for training or research purposes. This applies on every plan. There is no opt-in and no promotional plan that changes it.

Billing Information

Payments are securely processed by Stripe.

We do not store complete payment card information on our systems. Payment information is handled in accordance with Stripe’s security and compliance standards.

Automatically Collected Information

When you use the Services, we may automatically collect:

• Device information
• Browser information
• Operating system
• Log data
• Request metadata
• Diagnostic information
• Security events

This information is used to operate, secure, troubleshoot, and improve the Services.

Cookies and Marketing Analytics

On our public marketing website, we may use cookies and similar technologies to understand website usage, measure marketing performance, and improve the experience for visitors.

Marketing and analytics cookies are optional. Where required by applicable law, we only use these optional cookies after you opt in through our cookie consent notice.

If you opt in, information collected through these cookies may include:

• Pages viewed
• Referring websites or campaigns
• Approximate location derived from IP address
• Browser and device information
• Interaction and usage events on our marketing pages

We may share cookie-based analytics and marketing measurement data with third-party analytics, advertising, or measurement providers that help us understand site usage and evaluate the effectiveness of our marketing. These providers may process the information according to our instructions and their own privacy terms, depending on the service.

You can decline optional cookies in the cookie notice. If you decline, we will not use optional marketing or analytics cookies for that browser unless you later opt in.

3. VScan Cooked

This section applies only to the vscan cooked feature and is the sole exception to your organization’s standard sharing and retention policies. All other vscan features follow those policies as usual.

Conversation Data

When you run vscan cooked, the conversation data used during analysis:

• Is retained for a maximum of 90 days
• Is never used for training
• Is never shared with third parties
• Is stored securely on our servers
• Is never made public

Analysis results are public, though unlisted (accessible only via direct link, not indexed or discoverable). If your code is sensitive and you’re concerned about accidental exposure, do NOT run vscan cooked.

Analysis Outputs

Analysis outputs are retained indefinitely, including after account deletion.

To request deletion of a specific analysis, contact [email protected]. Deletion requests are honored regardless of your region.

4. How We Use Information

We use personal information to:

• Provide and maintain the Services
• Authenticate users
• Process payments
• Detect fraud, abuse, and security incidents
• Comply with legal obligations
• Respond to customer support requests
• Improve product reliability and security
• Develop and improve our Services using product usage and diagnostic data; this never includes training or evaluating AI models on your code, scans, or findings
• Measure website usage and marketing performance where you have opted in to optional cookies

Where required by applicable law, we rely on an appropriate legal basis, including performance of a contract, compliance with legal obligations, legitimate interests, or your consent.

5. AI and Machine Learning

Vaktex does not use customer code, scan results, or findings to train or evaluate machine learning models. This applies on every plan. There is no opt-in program and no promotional exception that changes it.

We do not use customer code for AI model training under any circumstances.

6. Data Sharing

We do not sell personal information.

We may share information with:

• Payment processors, including Stripe
• Cloud infrastructure providers
• Security service providers
• Analytics, advertising, and measurement providers where you have opted in to optional marketing or analytics cookies
• Professional advisors
• Government authorities when legally required

All third parties are required to protect personal information consistent with applicable laws and contractual obligations.

7. International Transfers

Your information may be processed in countries other than your own.

Where required by law, we implement appropriate safeguards for international data transfers, including recognized contractual protections or other lawful transfer mechanisms.

8. Data Retention

We retain personal information only for as long as necessary to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Protect the security and integrity of our systems

When information is no longer required, it is securely deleted or anonymized where appropriate.

9. Your Rights

Depending on your location, you may have rights including:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Request restriction of processing
• Object to certain processing activities
• Receive a copy of your information where applicable
• Withdraw consent where processing is based on consent

You may decline optional marketing and analytics cookies through the cookie notice. If you previously opted in, you can withdraw consent by clearing this site’s cookies or local storage in your browser and making a new selection when the cookie notice appears again.

You may request deletion of your account and/or personal data by emailing:

[email protected]

We will respond in accordance with applicable law.

Some information may be retained where required to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

10. Security

We implement administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our Services are not intended for children under the age required by applicable law to independently consent to data processing in their jurisdiction. We do not knowingly collect personal information from children without appropriate legal authorization.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

When material changes are made, we will update the “Last Updated” date and provide additional notice where required by applicable law.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:

Vaktex Support

Email: [email protected]

Last updated: July 31, 2026