Privacy Policy

Vibecodewall collects: email (to send scan reports), domain hostnames you scan, scan findings, and (for Pro authenticated scan) test-account credentials encrypted at-rest with AES-256-GCM.

Authentication credentials are encrypted using a server-side key (AUTH_VAULT_KEY) and decrypted only at scan time, in a sandboxed Node process. They are never logged.

We do not sell your data. We do not share with third parties except: Stripe (for billing), Asaas (for billing in Brazil), Resend (for email delivery), Cloudflare (CDN/WAF), Supabase (managed database).

You may delete your account, domains, scan history, and credentials at any time from the dashboard. Deletion is irreversible.

Brazil/LGPD users: contact [email protected] to exercise your data subject rights.