Privacy Policy
This explains what data Codevanta collects, how it's used, and what you can do about it.
1. What we collect
When you request a trial, we collect your name, work email, and the details you share about your scanning needs.
When you connect a repository, we process your source code transiently to generate scan findings — we do not retain source code after a scan completes. See our Trust page for the full data-flow breakdown.
Like most web services, our site logs IP addresses and request metadata for security and abuse prevention.
2. How we use it
Information is used to operate the platform, generate and deliver scan findings, and respond to support requests.
We do not sell customer data, and we never use a customer's source code or findings to train models or for any purpose outside that customer's own account.
3. Who we share it with
Only infrastructure sub-processors required to run the platform. We may also share information when legally required to by a regulator or court order.
4. Data retention
Findings metadata is retained for the duration of your subscription plus a reasonable transition period after cancellation. Source code is never retained — see our Trust page for the scan lifecycle.
5. Your rights
You can request a copy of the data we hold, ask us to correct it, or request deletion of your account data. Reach out through the contact details below.
6. Changes to this policy
If this policy changes in a way that materially affects how we handle your data, we'll notify active customers directly before the change takes effect.
7. Contact
Questions about this policy can be sent to hello@codevanta.cloud, or by post to Baneshwor, Kathmandu 44600, Nepal.