Legal
Privacy
Controller: ExfilPath Pvt. Ltd
Summary
ExfilPath analyses your source code locally: in your browser session, on your build runner, or inside your own network for self-hosted deployments. We do not receive, store or process your source code.
We retain no scan results, file names or findings. If you contact us or create a workspace, we process the business contact details you provide so we can respond.
What we process
Source code and analysis results: none on our side. Analysis runs where your code already is.
Business contact details: name, work email, company and the content of your message, when you contact us or request a workspace.
Website telemetry: our host records standard request data such as IP address, user agent and requested path for availability and abuse prevention.
What we do not do
We do not use session recording or third-party advertising trackers.
We do not sell or share personal data with advertisers.
We do not train models on your source code, and we never send it to a model provider.
Legal basis
Where a legal basis is required, we rely on legitimate interests to respond to correspondence and to keep this service available and secure, on performance of a contract where you hold a paid plan, and on consent where you have given it explicitly.
Retention
Correspondence is retained while the conversation is active and for a reasonable period afterwards for context. Account records are retained for the life of the account and for the period required by tax and accounting obligations. Website request logs are retained for a short operational window.
International transfers
Where personal data is transferred across borders by our service providers, we rely on the transfer mechanisms those providers make available, such as standard contractual clauses. Because analysis is local, source code is not transferred at all.
Your rights
Subject to local law, you may request access, correction, deletion or restriction of your personal data, and object to processing.
To exercise any of these, email hello@exfilpath.tech. We respond within 30 days.
Processors
No processor participates in code analysis. Standard providers serve this website and our business email, and a payment processor will handle billing at general availability. A current list is available on request.
Contact
Data protection enquiries: hello@exfilpath.tech. Security matters: support@exfilpath.tech. Our postal address is available on request.