Skip to content
Early access: the full platform is free until general availability.See plans
ExfilPath

Legal

Privacy

Written in plain language, because a privacy policy that needs interpreting is not a policy.

Controller: ExfilPath Pvt. Ltd

Summary

ExfilPath analyses your source code locally: in your browser session, on your build runner, or inside your own network for self-hosted deployments. We do not receive, store or process your source code.

We retain no scan results, file names or findings. If you contact us or create a workspace, we process the business contact details you provide so we can respond.

What we process

Source code and analysis results: none on our side. Analysis runs where your code already is.

Business contact details: name, work email, company and the content of your message, when you contact us or request a workspace.

Website telemetry: our host records standard request data such as IP address, user agent and requested path for availability and abuse prevention.

What we do not do

We do not use session recording or third-party advertising trackers.

We do not sell or share personal data with advertisers.

We do not train models on your source code, and we never send it to a model provider.

Legal basis

Where a legal basis is required, we rely on legitimate interests to respond to correspondence and to keep this service available and secure, on performance of a contract where you hold a paid plan, and on consent where you have given it explicitly.

Retention

Correspondence is retained while the conversation is active and for a reasonable period afterwards for context. Account records are retained for the life of the account and for the period required by tax and accounting obligations. Website request logs are retained for a short operational window.

International transfers

Where personal data is transferred across borders by our service providers, we rely on the transfer mechanisms those providers make available, such as standard contractual clauses. Because analysis is local, source code is not transferred at all.

Your rights

Subject to local law, you may request access, correction, deletion or restriction of your personal data, and object to processing.

To exercise any of these, email hello@exfilpath.tech. We respond within 30 days.

Processors

No processor participates in code analysis. Standard providers serve this website and our business email, and a payment processor will handle billing at general availability. A current list is available on request.

Contact

Data protection enquiries: hello@exfilpath.tech. Security matters: support@exfilpath.tech. Our postal address is available on request.