Privacy policy

ExfilPath analyzes your source code locally: in your browser session, or inside your own network for self-hosted deployments. We do not receive, store or process your source code.

We retain no scan results, file names or findings. If you contact us or create an account, we process the business contact details you provide so we can respond and keep your account working.

Source code and analysis results: none on our side. Analysis runs where your code already is.

Account details: your name, email address and sign-in identifiers when you create an account. Sign-in is provided by our authentication provider, Clerk, which processes these details on our behalf.

Business contact details: name, work email, company and the content of your message, when you contact us.

Website telemetry: our host records standard request data such as IP address, user agent and requested path for availability and abuse prevention.

We do not use session recording or third-party advertising trackers.

We do not sell or share personal data with advertisers.

We do not train models on your source code, and we never send it to a model provider.

Where a legal basis is required, we rely on legitimate interests to respond to correspondence and to keep this service available and secure, on performance of a contract where you hold an account or a paid plan, and on consent where you have given it explicitly.

Correspondence is retained while the conversation is active and for a reasonable period afterwards for context. Account records are retained for the life of the account and for the period required by tax and accounting obligations. Website request logs are retained for a short operational window.

Where personal data is transferred across borders by our service providers, we rely on the transfer mechanisms those providers make available, such as standard contractual clauses. Because analysis is local, source code is not transferred at all.

Subject to local law, you may request access, correction, deletion or restriction of your personal data, and object to processing.

To exercise any of these, email hello@exfilpath.tech. We respond within 30 days.

No processor participates in code analysis. Standard providers serve this website, account sign-in and our business email, and a payment processor will handle billing when paid plans launch. A current list is available on request.

Data protection enquiries: hello@exfilpath.tech. Security matters: support@exfilpath.tech. Our postal address is available on request.