Privacy Policy

1. Information We Collect

We collect the following information to provide and improve our services:

• Uploaded smart contract source code — submitted for scanning purposes only
• License key and machine fingerprint — used for license validation and activation management
• Payment information — processed by Stripe; we never see or store your card details
• OpenAI API key — set by the administrator in Settings, stored on the server in a file only the service can read, used only to call OpenAI

2. How We Use Your Data

• Uploaded code is saved on the server only for scanning and is deleted within 24 hours
• License validation sends only: your license key, machine fingerprint, product version, and timestamp
• No source code, audit results, or personal data is transmitted to third parties
• The OpenAI API key (if the administrator sets one) is stored in a file only the service can read; it is not encrypted

3. Data Retention

• Scan results (findings, reports and the code snippets they quote) are kept for 30 days so you can return to them, then deleted. Signed-in users can delete a scan sooner from the dashboard.
• License activation records are retained for subscription management
• Payment records are managed by Stripe per their privacy policy

4. Third-Party Services

We use the following third-party services that may collect information as described in their respective privacy policies:

• Stripe (payment processing) — stripe.com/privacy
• OpenAI (AI Copilot, if configured by user) — openai.com/privacy

5. Your Rights

• You may request deletion of your data at any time
• You may request that your license activations be cleared
• Contact us: contact@counterscarp.io

6. Updates to This Policy

We may update this Privacy Policy from time to time. We will provide at least 30 days' notice before any material changes take effect. Continued use of Counterscarp Engine after changes become effective constitutes acceptance of the updated policy.