1. Introduction
This Privacy Policy explains how SecureDev KSA ("the Platform", "we", "us") collects, uses, and protects your personal data in accordance with the Saudi Personal Data Protection Law (PDPL).
2. Data We Collect
We collect: account information (username, email, role), repository metadata (name, URL, branch — not source code contents), scan results and findings, and audit logs of actions taken within the Platform for security and compliance purposes.
3. Source Code Handling — No Storage Guarantee
We do not permanently store your source code. When you trigger a scan, your repository is temporarily cloned to perform automated security analysis, and this temporary copy is automatically and permanently deleted immediately after the scan completes. Only the resulting findings (vulnerability type, file path, line number, and scanner-generated description) are retained.
4. How We Use Your Data
Your data is used to: provide scanning and compliance reporting features, generate AI-assisted vulnerability explanations, maintain audit logs for security accountability, and communicate with you (e.g. password reset emails, account deletion confirmations).
5. Third-Party Data Processors
We use OpenAI's API to power the AI Security Coach feature. When you request an AI explanation, the vulnerability type and file path (not your source code) are sent to OpenAI's servers to generate a response. We use Hostinger for transactional email delivery (password resets, account deletion confirmations).
6. Your Rights Under PDPL
You have the right to access your personal data, request correction of inaccurate data, request deletion of your account and associated data (available directly through Account Settings), and withdraw consent for data processing where applicable.
7. Data Retention
Account data and scan findings are retained for as long as your account remains active. Upon account deletion, all associated data is permanently removed from our systems.
8. Data Security
We implement technical safeguards including encrypted connections (HTTPS/SSL), role-based access controls, and secure password storage to protect your data.
9. Contact Us
For privacy-related questions or to exercise your PDPL rights, contact us at contact@1saudicyber.com.