Privacy Policy
Last updated: October 15, 2026.
Your code
When you upload a .zip or give us a public GitHub link, we read the code in memory to run a static review. We don't run your code, we don't contact your live site, and we don't keep your code: it is discarded as soon as the scan finishes. We don't use your code to train any model.
If you subscribe to the Canary Check newsletter we store your email address and the optional fields you enter (name, app, stack) in private storage on Vercel. We use it only to send the newsletter and product updates. You can unsubscribe at any time by replying "unsubscribe" to any email or by emailing hello@prodcanary.com to be removed and have your data deleted.
Payments
Payments are processed by Stripe. We never see or store your card number. We receive your email address and order details from Stripe so we can deliver your report and handle support or refunds.
Analytics
We use Vercel Web Analytics and Speed Insights, which are cookieless and don't track you across sites. They record anonymous page views, performance metrics and events like "scan started" or "checkout clicked". We don't use advertising trackers and we don't set tracking cookies, so there's no cookie banner.
Service providers
Vercel (hosting, storage, analytics), Stripe (payments), Resend (email), GitHub (fetching public repos you give us).
Your rights
You can ask us to access, correct or delete your personal data at any time: hello@prodcanary.com. We don't sell personal data.