Privacy Policy
Version 2026-10-10.2
This policy explains what FixProof, a service of Tars Technologies Private Limited, India, collects and what we do with it. It is written to meet India's Digital Personal Data Protection Act, 2023.
What we collect
- Contact details you enter: name, email address, and company (optional).
- What you ask us to scan: your live site address and repository link.
- Scan results: the findings and the report we generate. Findings can include short snippets of your code or of your site's responses as evidence; secrets are masked.
- Technical data: IP addresses and request details in server logs, used to run and protect the service.
Your source code is not kept. It is cloned into an isolated container with no network access, scanned, and deleted when the scan finishes.
Why we use it
- to run the scan you requested and email you the report;
- to reply when you write to us, including offers to help fix findings you asked about;
- to prevent misuse, such as scans of sites the requester doesn't own;
- to operate, secure and improve the service.
We do not sell your data, and we do not use your code or findings to train AI models.
Who processes it for us
- Hetzner (Germany): our servers and database.
- Resend (EU region): sends our emails.
- Cloudflare: hosts this website, our DNS, and forwards email sent to hello@fixproof.dev.
They process data only to provide those services to us.
How long we keep it
- Report links stop working 30 days after they are sent.
- 90 days after a scan, we erase its report and the evidence and locations in its findings. We keep only which checks flagged an issue and how severe it was, without any detail.
- If you haven't requested a scan for 12 months, we delete your contact details and scan history entirely.
- You can ask us to delete everything sooner (see below).
- Database backups are kept for up to 30 days, so deleted data disappears from them within 30 days.
Your rights
You can ask us to show you, correct, or delete the data we hold about you, or withdraw your consent, by emailing hello@fixproof.dev. We will delete your contact details, scan history and reports, and they will drop out of backups within 30 days. If you are unhappy with our response, you may complain to the Data Protection Board of India.
Grievances and contact
Tars Technologies Private Limited · hello@fixproof.dev
Changes
If we change this policy, the version date above will change.