This page is a courtesy translation. If there are differences, the Spanish version prevails.

Privacy notice

Last updated: October 2026

1. Data controller

Agencia Audit4Web, whose address and jurisdiction are those established in the terms and conditions of audit4web.com (hereinafter, “Tribe Code Analyzer”), is responsible for processing your personal data in accordance with this notice. You can contact us at our contact email.

2. Data we process

• Account: email address, password (stored with a secure hashing algorithm, never as plain text), the key for your two-step verification (encrypted), your theme preference and the language you chose for the site, the emails and the reports.
• Use of the service: sign-in and activity logs with the IP address, credit balance and movements, requested analyses and AI model usage.
• Source code you upload or connect: it is stored encrypted only while it is being analyzed and is deleted when the analysis ends, when it is cancelled or, at the latest, 24 hours after it was received, even if the analysis has not finished. From the package we keep its digital fingerprint (SHA-256), the list of files and size data. Your report keeps, encrypted, the code snippets of each finding and their fix, so that you can consult it, until you delete it with “Delete this report”.
• GitHub, if you connect it: the name of your GitHub account or organization, the app installation number and the date of the last confirmation. The code is downloaded with a temporary read-only permission, which is not stored.
• Support: the question you send and the AI’s answer, stored encrypted. They are deleted after 90 days, and you can delete them sooner.
• Payments: they are processed by PayPal. We do not store your card data; we receive the payment confirmation and basic transaction data.

3. What we use your data for

• Creating and managing your account, and providing you with the code analysis service.
• Generating and keeping your reports.
• Managing credits, payments and billing.
• Answering your Support questions and communicating with you.
• Protecting the platform: preventing fraud, abuse and unauthorized access.
• Preparing internal usage and operations reports, only with aggregate figures and without your code.

4. Who we share information with

• AI model providers through OpenRouter: they receive snippets of your code to generate the analysis, or the text of your Support question. Each request asks OpenRouter to use only providers that do not retain the data and do not use it to train models.
• PayPal, to process payments.
• GitHub, only if you connect your account, in read-only mode and only with the repositories you choose.
• The platform’s hosting and email provider.
• Authorities, when there is a legal requirement.

We do not sell your personal data.

5. Retention

• Source code: it is not kept. It is stored encrypted only while it is being analyzed and is deleted when the analysis ends or is cancelled. If processing fails, it remains encrypted for a maximum of 24 hours and is then deleted.
• Reports: they are kept, encrypted, until you delete them with the “Delete this report” option. Deleting them removes all their content and everything that identifies the project; only the usage figures of that analysis remain (date, credits and cost), without project data.
• Account data: it is kept while the account is active. Support questions are deleted after 90 days.
• Closing the account: if you want to close it, write to our contact email. Your account, your reports and your credits are deleted. Only the security activity log is kept, which, because of its integrity seal, cannot be modified and does not contain the code or the content of your projects.

6. Your rights

You can request access to, rectification of, cancellation of and objection to the processing of your data, as well as withdraw your consent, by writing to our contact email with your name, your account email and the request. We will respond within the time limits set by applicable law.

7. Security

We apply reasonable technical and administrative measures to protect your data, including encrypted connections, two-step verification, encryption of sensitive information, per-account access control and an activity log with an integrity seal. No system is infallible, and we will notify you of any incident that affects you when the law requires it.

8. Changes to this notice

We will publish any change on this page and update the last-updated date.