Privacy Policy

Last updated: September 26, 2026

1. Who we are

BraimSec is operated by Braim, an individual business. For privacy questions or requests, contact braimsec.support@gmail.com.

2. Data we collect

Account data: your name and email address when you register or contact us.
Code you submit: source code, archives, or repository references you provide for scanning, plus the scan results we generate.
Usage data: API calls, scan counts, and basic diagnostic logs needed to operate and secure the Service.
Billing data: handled by our reseller Paddle.com (see below). We do not store your card details.

3. How we use your data

To provide scan results and operate your account;
To enforce plan limits and prevent abuse;
To communicate about your account, billing, and important service changes;
To improve detection quality using aggregated, anonymized statistics — never your raw code.

Your code is not used to train machine learning models. Code you submit is processed solely to produce your scan results.

4. Payments and Paddle

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Payment information is processed by Paddle under Paddle's privacy policy; we receive only the subscription status and billing metadata needed to provision your plan.

5. Data retention

Scan artifacts (submitted code and raw results) are retained for 30 days to allow re-analysis and support, then deleted automatically. Account and billing records are retained as required by law. You may request earlier deletion of your scan data at any time.

6. Sharing

We do not sell your personal data. We share data only with:

Paddle.com — for order processing and billing;
Infrastructure providers — hosting and email delivery, bound by confidentiality;
Authorities — only when required by law.

7. Security

We apply industry-standard measures: encryption in transit, hashed API credentials, per-customer data isolation, and rate limiting. No method is perfectly secure, and we will notify you of any breach affecting your data as required by law.

8. Your rights

You may request access, correction, export, or deletion of your personal data at any time by emailing braimsec.support@gmail.com. We respond within 30 days.

9. Changes

We may update this policy; material changes will be announced by email at least 14 days before taking effect.