Last updated: December 2025

1. Introduction

Vexlint ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered code security scanning service.

We are based in the European Union and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Data Controller: Vexlint
Contact: privacy@vexlint.com

2. Information We Collect

We collect minimal information necessary to provide and improve our services:

2.1 Information You Provide

Email Address: When you join our waitlist or subscribe to updates, we collect your email address to communicate with you about our service.

2.2 Information Collected Automatically

Usage Data: We collect anonymized analytics data including pages visited, time spent on pages, and general interaction patterns.
Technical Data: Browser type, device type, operating system, and approximate location (country/region level only).
Cookies: We use essential and analytics cookies as described in Section 10.

Important: We do not collect, store, or process your source code. Any future code analysis features will be designed with privacy-by-design principles.

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

Consent (Article 6(1)(a)): When you provide your email address to join our waitlist or subscribe to communications, you consent to receiving emails from us. You may withdraw this consent at any time.
Legitimate Interests (Article 6(1)(f)): We process anonymized analytics data to understand how users interact with our website and to improve our services. This processing is balanced against your privacy rights.

4. How We Use Your Information

We use the information we collect for the following purposes:

Managing our waitlist and communicating with prospective users
Sending product updates, launch announcements, and relevant information about Vexlint
Analyzing website usage to improve user experience and service quality
Responding to your inquiries and providing customer support
Ensuring the security and proper functioning of our website
Complying with legal obligations

5. Third-Party Services

We use carefully selected third-party service providers to help us operate our business. These providers are contractually bound to protect your data and may only use it for the purposes we specify:

Analytics Services: We use privacy-focused analytics to understand website usage patterns. These services collect anonymized data and do not track individual users across websites.
Email Services: We use email service providers to send communications to our waitlist subscribers. Your email address is shared with these providers solely for the purpose of delivering our emails.
Hosting Services: Our website is hosted on secure cloud infrastructure within the EU or with providers that comply with GDPR requirements.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Email Addresses: Retained until you unsubscribe from our communications or request deletion of your data.
Analytics Data: Anonymized analytics data is retained for up to 26 months to analyze trends and improve our services.
Support Communications: Records of support inquiries are retained for up to 3 years for quality and legal purposes.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data in certain circumstances.
Right to Restrict Processing: You have the right to request that we limit how we use your data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.
Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@vexlint.com. We will respond to your request within 30 days.

8. International Data Transfers

We primarily store and process data within the European Economic Area (EEA). If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

Transfers to countries with an adequacy decision from the European Commission
Standard Contractual Clauses (SCCs) approved by the European Commission
Other legally recognized transfer mechanisms

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit using TLS/SSL
Secure access controls and authentication mechanisms
Regular security assessments and updates
Limited access to personal data on a need-to-know basis

While we strive to protect your personal data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to taking all reasonable measures to protect your information.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website:

Essential Cookies: Necessary for the website to function properly. These cannot be disabled.
Analytics Cookies: Help us understand how visitors interact with our website. These are used to collect anonymized usage data.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@vexlint.com, and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date. For significant changes, we may also notify you via email if you are a registered user. We encourage you to review this Privacy Policy periodically.

13. Contact Us and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@vexlint.com

If you are not satisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority in the EU Member State where you reside, work, or where the alleged infringement occurred.