Privacy Policy · Solbend

This Privacy Policy explains how Encribe L.L.C-FZ, a limited liability company registered in the United Arab Emirates ("Encribe", "we", "us" or "our") collects, uses and shares personal data when you use Solbend (the "Service"). We are responsible for this data. You can contact us at .

1. Data We Collect

Account data. Your GitHub or GitLab user ID, username, name and profile picture, and the access tokens that allow the Service to read your repositories.
Repositories. The repositories you connect.
Code. A copy of your code while a scan runs. It is deleted when the scan ends.
Results. Your scan results and proof files, which include a copy of the contracts scanned.
Payment data. Your Stripe customer ID, plan and purchases. Card details are handled by Stripe and never reach us.
Agreement records. Each version of the Terms of Service and of this Privacy Policy that you accepted, and when.
Server logs. The IP address and time of each request.
Usage statistics. The pages you visit, the site that referred you, and your browser, device type, language and approximate location, counted by our own analytics service (Umami) without cookies. Your IP address is used to find your approximate location and is not stored.

2. How We Use Your Data

We use personal data to provide the Service, process payments, keep the records the law requires, and keep the Service secure. We do so to perform our agreement with you, to meet our legal obligations, and in our legitimate interest in keeping the Service secure. We use usage statistics, in our legitimate interest, only to understand how the Service is used and to improve it. We do not sell personal data or show advertising.

3. GitHub and GitLab Permissions

The Service asks for permission to read your profile and your repositories. GitHub's repository permission also allows changes, because GitHub offers no read-only option for private repositories, but the Service only reads. GitLab's permissions are read-only. You can withdraw these permissions at any time in your GitHub or GitLab settings.

4. Who We Share Data With

We share personal data only with the providers below, and only as needed to run the Service.

GitHub or GitLab, for sign-in and access to your code.
Stripe, for payments.
OVH, which hosts our server in Germany.

Stripe, GitHub and GitLab are based in the United States. Transfers of personal data to them are protected by the European Commission's Standard Contractual Clauses. We may also disclose personal data where the law requires it.

5. Cookies and Browser Storage

The Service keeps your sign-in and your theme setting in your browser's storage, and sets no cookies of its own. Its usage statistics use no cookies either. Stripe's payment form sets the cookies it needs to prevent fraud.

6. How Long We Keep Data

We keep personal data until you ask us to delete it, except payment and agreement records, which we keep for as long as we need them for legal purposes. Server logs are kept for a short time.

7. Your Rights

You have the right to request a copy of your personal data, and to ask us to correct or delete it. To do so, write to us at . You also have the right to complain to your data protection authority.

8. Changes to This Policy

We may change this Privacy Policy. Each version is dated, and every earlier version stays available on this page. If we make a material change, we will ask you to accept the new version before you continue to use the Service.