Privacy Policy

1. Introduction

VerX (“we,” “our,” or “us”) operates the verx.dev website and platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information that you provide directly to us:

• Account information: name, email address, and authentication credentials when you create an account.
• Repository data: when you connect a repository, we clone and analyze its dependency files (package.json, lockfiles, and import statements). We do not store your application source code beyond what is needed for dependency analysis.
• Usage data: information about how you interact with our platform, including pages visited, features used, and scan results viewed.

3. How We Use Your Information

• To provide, maintain, and improve the VerX platform.
• To scan your dependencies for vulnerabilities and generate upgrade plans and merge requests.
• To send you service-related notifications (e.g., new vulnerability alerts).
• To respond to your support requests.
• To detect and prevent fraud or abuse.

4. Data Storage & Security

Your data is stored on secured infrastructure. We use encryption in transit (TLS) and at rest. Repository clones are processed in isolated containers and deleted after analysis is complete. We retain scan results and dependency metadata for as long as your account is active.

5. Data Sharing

We do not sell your personal information. We may share data with third-party service providers who assist in operating our platform (e.g., hosting, analytics), but only to the extent necessary for them to perform their services. We may also disclose information if required by law.

6. Your Rights

You have the right to:

• Access, correct, or delete your personal data.
• Export your scan results and dependency reports.
• Disconnect repositories and request deletion of all associated analysis data.
• Close your account at any time.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies, if used, are anonymized and can be opted out of via your browser settings.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

9. Contact

If you have questions about this Privacy Policy, contact us at privacy@verx.dev.