Privacy policy

SigmaVibe is operated by S.R.L. Perfection Studio, trading as Revenco Agency, Chișinău, Republic of Moldova. Privacy questions and data-subject requests can be sent to privacy@sigmavibe.xyz.

• URLs you submit and public content, headers and assets returned by those URLs.
• Scan results, evidence, scores and fix prompts created from that content.
• Account details supplied through our authentication provider, such as email and name.
• Project settings, ownership-verification records, consent choices and audit events.
• A one-way keyed hash of the client IP for anonymous rate limiting; the raw address is not stored in the rate-limit ledger.
• Basic operational logs needed to secure, diagnose and run the service.

We process submitted data to provide the requested scan, protect the service from abuse, maintain account projects, improve reliability and meet legal obligations. We do not sell personal data or use submitted source code to train our own models.

Anonymous scans use read-only public requests. Browser flow testing and source-code analysis require an authenticated account, verified project ownership and separate opt-in consent. Active testing blocks payment actions, destructive HTTP methods and cross-origin mutations, but it can create test records in a site you authorize.

Depending on configuration, we use service providers for hosting and database infrastructure, authentication, AI-assisted fix generation, email and error monitoring. These providers process only the data needed for their function and may process it outside your country under their contractual transfer safeguards.

Unclaimed anonymous scan projects expire after 24 hours. Anonymous rate-limit records expire after 48 hours. Account projects and their reports remain until you delete them or request deletion, except where a longer period is required for security, disputes or law. Backups and provider logs may take additional time to age out under their normal retention cycles.

The public scanner does not require an advertising cookie. Authentication may set strictly necessary session and security cookies. We do not intentionally deploy third-party advertising trackers on SigmaVibe.

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection and may withdraw optional consent at any time. You may also complain to the competent data-protection authority. We may need to verify your identity before acting on a request.