Privacy & retention

• One-shot scans: restricted key discarded after the job; never stored on completed one-shot rows.
• Watchdog: encrypted key at rest (app ENCRYPTION_KEY). Unsubscribe / delete removes the ciphertext.
• Invoice customer emails are redacted in reports by default.
• We email only the buyer who paid for the scan / watchdog — never your customers.
• No Connect. No Stripe App in v1. No dunning product.

← Back