Privacy Policy

This policy explains what ISE Digital Solutions ("we") collects when you use VIfix, and why. The short version: your source code stays on your computer.

What we collect

• Account data: your email address and, if you sign in with GitHub, your GitHub user ID and profile name.
• Billing data: subscription status and plan. Payment details are collected and stored by Stripe, not by us.
• Usage counts: the number of scans, AI fixes and pull requests per billing period, used to enforce plan limits.
• Device sessions: a device name (e.g. your computer's hostname) and last-used time for each signed-in app.

What we don't collect

• Your source code, scan findings, file paths or repository contents.
• Your GitHub token or AI provider keys, which are stored encrypted on your device only.

Third parties

• Supabase: authentication and database hosting.
• Stripe: payment processing.
• Vercel: website and API hosting.
• Anthropic or OpenAI: only when you request an AI fix, using your own API key, and only the affected file with detected secrets removed. Their terms govern that data.

Retention and deletion

We keep account and billing records while your account is active and as required for tax and accounting. To delete your account, email hello@getvifix.com.

Contact

Questions about privacy: hello@getvifix.com.