Privacy
Repositories and archives are downloaded to A3E's own computer in Canada, read as text, and deleted when the scan finishes. Scan results are kept for 7 days. Only package names and versions are sent to OSV.dev to look up vulnerabilities. For monitoring we keep the repository address, your email and the advisories already reported to you, until you remove the monitor or your plan ends. Your browser keeps your subscription reference. Stripe processes payments. Contact our privacy officer at [email protected].