Security and privacy

Your code

• We do not keep your code. While the review runs, your files are held encrypted on disk, with a key held in memory only, and they are deleted when the job ends. They are never stored in readable form and never logged.
• To review it, we send the text to an AI company for analysis. It processes the text on our behalf, under the terms of its service. We do not send it anywhere else.
• If you scan a GitHub repository, we fetch the branch you chose for that run.

Your report

• The finished report is stored encrypted, for at most 24 hours.
• It is deleted sooner once you have downloaded both the Markdown and the HTML files, or when you press Delete now.
• Viewing the report on screen does not count as a download.

What we do keep

• Your account details: email address, name if you give one, and how you sign in.
• Billing records: what was charged and when. Card details are held by our payment processor, Stripe, not by us.
• Numeric usage records: how many runs, their size and their cost. No code and no findings.

Optional: save data to my repo

If you turn on save data to my repo, we write encrypted files to a branch named provesw in your repository, through the GitHub connection you authorised. The files are encrypted, so they are not readable by people who can see the repository. You can delete the branch at any time, and this is the only thing we ever write to your repository.

How we protect it

• All traffic uses HTTPS. The signed-in application runs on its own address (data.provesw.com), separate from this site.
• This public site sets no cookies, runs no scripts and loads nothing from other sites.
• Sign-up is protected against automated abuse.

Deleting your account

You can delete your account at any time from the account page. Our privacy policy lists exactly what remains afterwards.

Limits of a review

A report is a review, not a promise that nothing was missed. It is produced by an AI model, which can be wrong in both directions: it can miss a bug, and it can report one that is not real. Check each finding before you act on it.