Privacy Policy

Security Tools ("we", "us", "our") is an AI security platform that runs primarily in your browser. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Local scan data: Scan results, findings, and machine metadata are stored exclusively in your browser's IndexedDB. This data never leaves your device unless you explicitly export or share it. Usage analytics: We use Vercel Analytics to collect anonymous, aggregate metrics (page views, country, browser). No personally identifiable information is collected. Email: If you contact us at hello@cybersecrepo.com, we retain your email solely to respond to your inquiry.

We do not collect: • Binary files you upload for scanning (APK, IPA, EXE, audio, video, images) • Source code or file contents • Passwords or credentials • Machine hostnames or IP addresses beyond the local agent session All analysis of uploaded files occurs in your browser. Only small indicator payloads (library names, hashes) are sent to third-party threat intelligence APIs.

The app optionally queries the following read-only threat intelligence APIs: • NVD (National Vulnerability Database) • URLhaus / MalwareBazaar (Abuse.ch) • ThreatFox • AlienVault OTX These requests contain only hash values or library names — no file contents or personal data. Each service has its own privacy policy.

We use only essential cookies required for session management. We do not use tracking or advertising cookies. You can disable cookies in your browser settings without affecting core functionality.

Scan data stored in IndexedDB persists until you clear your browser data or use the in-app "Clear All Data" function. We do not retain any copies on our servers.

You have the right to access, correct, or delete any personal data we hold. Because we store virtually no personal data, you can delete all scan data at any time through your browser settings. For other requests, contact hello@cybersecrepo.com.

All connections to hodan.ai are encrypted via HTTPS/TLS. The CIS audit agent communicates with our API over HTTPS. The agent script is open-source and can be audited at any time.

We may update this policy as the product evolves. We will update the "Last updated" date above and, for material changes, notify users via the app banner.

Questions about this policy? Email us at hello@cybersecrepo.com.