Privacy Policy

Last updated: August 18, 2026

How GitMend handles your data — account information, scan results, and screenshots of the sites you scan.

Overview

This Privacy Policy explains how GitMend ("we", "us") collects, uses, and protects information when you use our AI-powered website security scanning service. By using the Service you agree to the practices described here.

Information we collect

Account information: your name, email address, profile image, and authentication details when you sign up or sign in.

Project and scan data: the URLs of the apps you ask us to scan, the scan results we produce, and screenshots captured from scanned sites during scans.

Payment information: paid subscriptions are processed by Stripe. We receive your Stripe customer identifier and subscription status; card details are handled entirely by Stripe and never reach our servers.

Technical data: standard request logs, and IP address and user agent for the sessions you sign in with, used for security and account management.

How we use your information

We use your information to operate the Service: running scans against the apps you designate, generating and storing your reports, managing your account and sessions, processing subscriptions, and communicating with you about your account or the Service.

Legal basis for processing

We process your data to perform our contract with you (providing the scans you request), to comply with legal obligations, and where we have a legitimate interest in operating and securing the Service.

AI processing and screenshots

Scans are performed by AI agents that browse the target site like a real user. During a scan we may capture screenshots of the scanned site and page content needed to produce findings. This material is stored with the scan report and is only visible to your account (unless you explicitly enable a public share link for a report). Scan evidence is redacted for secrets before storage.

Sharing and sub-processors

We do not sell your personal data. We share data only with service providers necessary to run the Service — for example Stripe (payments) and our cloud and AI model providers that execute scans — each bound to process data only on our instructions.

We may disclose information if required by law or to protect the rights, property, or safety of GitMend, our users, or the public.

Data retention

Account and scan data are retained while your account is active. Deleting a project removes its scans, findings, and screenshots. Deleting your account removes your personal data, subject to legal retention requirements and backup expiry.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Most actions (editing your profile, deleting projects) are available directly in the app; for anything else, contact us at support@gitmend.com.

Security

We apply industry-standard measures such as encryption in transit, secret redaction in scan evidence, and strict tenant isolation of your data. However, no internet service can guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time; material changes will be reflected in the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance.

Questions about privacy can be sent to support@gitmend.com.