Privacy Policy

1. Who We Are

Skanzer is operated by Imagination Quotient (imaginationquotient.com), a DBA of Longino Consulting LLC. This policy describes how we collect, use, and protect your information when you use skanzer.ai (“the Service”).

2. Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. Authentication is handled by Supabase.

Scan Data

When you submit files for scanning, we store the file contents, file paths, scan results, and security findings. For GitHub scans, we also store the repository owner, name, and branch.

Usage Data

We may collect standard server logs including IP addresses, browser type, and pages visited. This data is used to maintain and improve the Service.

3. How We Use Your Information

• To provide and operate the security scanning Service
• To store and display your scan results and reports
• To generate public badge images for repositories you scan
• To send account-related emails (confirmation, password reset)
• To maintain, protect, and improve the Service

4. Data Storage and Security

Your data is stored in Supabase (hosted on AWS). We use industry-standard security measures including encrypted connections (HTTPS), row-level security policies, and secure authentication. However, no method of transmission or storage is 100% secure.

5. Data Sharing

We do not sell your personal information. We may share data in the following limited circumstances:

• Public reports and badges: Scan reports and repository badges are accessible via direct URL. These may include file paths, scan findings, and severity ratings.
• Service providers: We use Supabase for database hosting and authentication, and Vercel for application hosting. These providers process data on our behalf.
• Legal requirements: We may disclose information if required by law or to protect our rights.

6. GitHub Data

When you scan a GitHub repository, we fetch file contents from public repositories (or private repositories if you provide a GitHub token). We store the contents of scanned files for analysis purposes. We do not access any GitHub data beyond what is necessary to perform the requested scan.

7. Data Retention

Scan data and results are retained for as long as your account is active. You may request deletion of your account and associated data by contacting us.

8. Your Rights

You may:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing

To exercise these rights, reach out via the contact info below.

9. Cookies

The Service uses essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

12. Contact

Questions about this policy? Reach out to @trevorlongino on X.