Privacy Policy

DRAFT — replace before launch

1. Who we are

Argus Intelligence ("we", "us") is operated by Zhen Ee (sole-proprietor, Singapore) — transitioning to an Estonian OÜ in Q2 2026. Contact: zheneewong@gmail.com.

2. What data we collect

From the Scanner service

• Code metadata only: file paths, line numbers, library names, function-call identifiers from the PRs you authorise. We do not store your source code.
• GitHub App identifiers: repository ID, organisation name, PR number — required to post comments.

From the website

• Pageview analytics: aggregate, no cookies, no PII (Plausible).
• Form submissions: name, email, company, message — when you fill in the contact or waitlist forms.

3. How we use it

• To run the Scanner and post findings to your PRs.
• To respond to your enquiries.
• To improve the Scanner's risk classification (in aggregate, never tied to your code).

4. Third-party processors

• Lemon Squeezy — payment processing, Merchant of Record.
• Cloudflare — website hosting and edge cache.
• Formspree — form submission delivery.
• Plausible — privacy-respecting pageview analytics.
• GitHub — app distribution and PR comments.

5. Retention

Scan metadata is retained for 30 days, then deleted. Form submissions are retained until your enquiry is resolved or you request deletion. Aggregate analytics has no individual record.

6. Your rights (GDPR)

EU residents have the right to access, rectify, erase, restrict, port, or object to processing of their personal data. To exercise any of these, email zheneewong@gmail.com — we'll respond within 30 days.

7. Data Processing Agreement

Business and Enterprise customers who require a DPA can request one by emailing zheneewong@gmail.com.

8. Updates to this policy

We'll update this policy as needed. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via email to active customers.