Privacy Policy

Last updated: July 13, 2026

What we collect

When you request an audit we collect your name, email address, an optional repository or product URL, and any message you include. We also record the IP address and browser user-agent of the request for abuse prevention. If you create an account, we store your account and billing details; card data is handled entirely by our payment providers and never touches our servers.

How we handle your code

To produce an audit we clone your repository into an isolated working directory, compute metrics from it, and send limited file excerpts to Anthropic's API for analysis. The clone is deleted as soon as the analysis finishes. We do not use your code to train models, and we do not share it with anyone other than the analysis provider named above. We are happy to sign an NDA before you grant access.

How we use your data

We use your contact details to deliver the audit and send transactional email about it (verification, status, report links, receipts). We only send marketing email if you ticked the consent box, and every such email has an unsubscribe link. Unverified audit requests are deleted after 7 days.

Who we share it with

Only the processors needed to run the service: our hosting provider, our transactional email provider, our payment providers (e.g. Stripe, Paddle, Lemon Squeezy), and Anthropic for report analysis. We never sell your data.

Your rights

You can request a copy of your data or ask us to delete it at any time — email hello@flexpick.net and we'll act within 30 days. If you are in the EU/EEA, you additionally have the rights granted by the GDPR, including the right to lodge a complaint with your supervisory authority.