Privacy Policy

This Privacy Policy explains how unvi.be (“we”, “us”, or “our”) collects, uses, and protects information when you use the unvi.be code scanning service (the “Service”). It works alongside our Terms & Conditions.

The short version: we do not keep your source code. It is scanned in an isolated sandbox and deleted right after. We keep your email and the report we generate so we can deliver it, and we record basic, first-party analytics about how the site is used.

01The code you submit

When you upload a file or link a public repository, we process that code solely to run the scan and produce your report. Your code is handled in an isolated sandbox and is not executed. Once the scan completes, the submitted source code is deleted and is not retained by us. We do not use your code to train models, and we do not share it with anyone except the processors needed to run the scan (see section 5).

The report generated from your code (its findings and summary) is retained so we can email it to you and so you can revisit it. Please avoid submitting secrets such as live API keys, passwords, or personal data of others inside your code; rotate any credentials that may be present, as you would before sharing code anywhere.

02Your email address

We collect the email address you provide so we can deliver your report and, where relevant, send you information about the status of your scan or follow-on options. We retain it to associate it with your report and to apply usage limits fairly across submissions.

03Technical and usage data

To keep the Service secure and to understand how it is used, we record first-party analytics on our own servers (we do not use third-party advertising trackers). This can include:

• your IP address, used for security, abuse prevention, and enforcing per-address usage limits;
• browser and device information (such as user-agent), the pages you view, referring page, clicks, and scroll depth;
• a referral code stored in a cookie when you arrive through a share link, so we can credit the referrer.

04Cookies

We use a small number of first-party cookies that are necessary to operate the Service, such as remembering a referral code. We do not use third-party advertising or cross-site tracking cookies.

05Who processes your data

We use a small set of trusted third-party providers (sub-processors) to run the Service. They process data on our behalf and under agreements that require them to protect it:

• Cloud hosting, which runs the site, the sandbox, and our database;
• an AI model provider, which analyzes the submitted code to produce the report;
• an email delivery provider, which sends your report and notices;
• if you link a repository, the code host you link to (such as GitHub or GitLab), which serves the code we fetch.

We do not sell your personal data, and we do not share it for advertising.

06Why we are allowed to use your data

We process your data to provide the Service you requested (delivering your report), to keep the Service secure and prevent abuse, and to meet our legal obligations. Where the law requires a legal basis, we rely on performance of our agreement with you and on our legitimate interest in running a safe, reliable service.

07How long we keep things

• Submitted source code: deleted after the scan completes.
• Report, email, and scan metadata: retained while we operate the Service, and deleted or anonymized when no longer needed.
• Analytics and security logs: retained for a limited period for security and product improvement.

08Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, to object to or restrict certain processing, and to request a copy of it. To exercise any of these rights, email us at hello@unvi.be and we will respond within a reasonable time. Because we delete submitted source code after each scan, a deletion request mainly concerns your email, your reports, and associated metadata.

09Security

We take reasonable technical and organizational measures to protect data, including running scans in an isolated sandbox, deleting source code after use, and limiting access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10International transfers

Our providers may process data in countries other than your own. Where they do, we rely on those providers’ safeguards for lawful international transfers.

11Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data.

12Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected here before they take effect.

13Contact

Questions about your privacy or this policy? Email us at hello@unvi.be.