Privacy Policy

Overview

PkgTrace helps teams assess dependency maintenance and security risk. This policy explains what information we collect, why we collect it, and how you can contact us about privacy questions.

Information We Collect

We collect account information such as your name, email address, authentication provider IDs, organization membership, product usage, and billing status. If you sign in with Google or GitHub, we use OAuth to verify your identity and create or access your PkgTrace account.

When you scan repositories, packages, or dependency files, we process the repository names, package names, uploaded dependency metadata, scan results, and related operational logs needed to provide the service.

How We Use Information

We use information to operate PkgTrace, authenticate users, provide scan results, manage organizations and subscriptions, send product or security notifications, improve reliability, prevent abuse, and comply with legal obligations.

OAuth Providers

Google and GitHub sign-in are used for authentication. We request only the profile and email information needed to sign you in unless a connected feature clearly asks for additional access. You can revoke OAuth access from your Google or GitHub account settings.

Payments

Payments and subscription management are handled by Stripe. PkgTrace does not store full card numbers. We store billing identifiers, subscription status, plan information, and payment-related events needed to manage access to paid features.

Data Sharing

We share information with service providers that help us run the product, including hosting, authentication, payment processing, analytics, monitoring, and email delivery providers. We do not sell personal information.

Retention and Security

We retain information for as long as needed to provide the service, meet legal requirements, resolve disputes, and maintain security. We use technical and organizational safeguards designed to protect data, but no internet service can guarantee absolute security.

Contact

For privacy requests or questions, contact us at [email protected].