Privacy Policy

Last updated: March 30, 2026

1. Data We Collect

When you use Ubserve, we collect certain information to provide our security audits:

  • Application URL: The website address you provide for scanning.
  • Email Address: Used to notify you of scan results and security alerts.
  • Scan Results: Data identified during the audit such as exposed keys, RLS status, and SSL info.
  • GitHub Repository Details: If you elect to use our GitHub Deep Scan feature.

2. How We Handle Secrets

Ubserve is designed with your security in mind. We do not permanently store your production API keys, secrets, or database credentials. During a scan, our system analyzes your application's public bundles and configuration in real time. Any secrets identified are provided in your private report and are not accessible by our team or other users.

3. Use of Your Information

We use the data collected to:

  • Generate and deliver your security audit reports.
  • Provide biweekly rescans and security alerts for paid plans.
  • Improve our scanning algorithms for AI-built applications.
  • Communicate with you regarding your account and service updates.

4. Third Parties

We do not sell your personal information or scan results to third parties. We may use trusted service providers for core functionality, such as email delivery or database hosting, but they are bound by strict confidentiality agreements.

5. Data Retention

We retain your audit history to help you track your security score over time. You can permanently delete your account and all data attached to it at any time from Dashboard → Account. Deletion is immediate and irreversible: it removes your profile, sign-in, scans, reports, projects, integrations, API keys, and credits, and cancels any active subscription. We retain purchase records with your email address removed, because accounting law requires us to keep them.

6. Your Rights

If you are in the EU, UK, or another region with equivalent privacy law, you have the right to access, correct, export, restrict the processing of, or erase your personal data, and to object to processing. Erasure is self-serve at Dashboard → Account. For anything else, email hello@ubserve.com and we will respond within 30 days. You also have the right to complain to your local data protection authority.