Privacy
Last updated 2026-10-30.
- What we hold about a buyer. E-mail address, what you bought and when, and the Stripe customer and payment identifiers. Nothing else about you. Your license file contains your e-mail address and a license identifier. The personal download link in your purchase e-mail is calculated from your purchase; it is not a separate record about you.
- Payments. Handled by Stripe. We never see or store your card number; Stripe sends you the receipt.
- Your code and results. The command line tool runs on your own machine: your code is not uploaded and the tool sends no usage data to us. A cloud AI model is used only if you add your own key, and then only for what you confirm each time (short summaries by default).
- The web portal (online dashboard). Code you upload, or a sample you open, is analysed and never executed. It is kept in your own private account folder (encrypted storage, backed up, not visible to any other account) until you remove it with "Reset project" or ask us to delete it, and each account has a storage limit. We do not look at it.
- The free static analysis (trial). To try it you give an e-mail address (confirmed by a link) and choose a password; we keep the address, a salted hash of the password, the day your trial started and how many reports you made. A zip of code that you upload is read, never run: it is written to a private temporary folder on our server (Amazon Web Services, United States), analysed there and deleted as soon as the report is made, whether the analysis worked or not. We do not keep your code, the report or its content; we keep only a count that a report was made. The report holds counts and the names of the three most structural functions and their files; it is not sent to anyone.
- The free alpha (ParetoStack-chip, 0.5 line). To download it you give an e-mail address and confirm it with a link; we keep the address, the day you confirmed and that you hold the free alpha, and we send you that link and, if you ask, a sign-in link. The alpha's license file contains your e-mail address and a license identifier, like a purchase's. The alpha tool runs on your machine and sends nothing to us. We do not sell or share the address.
- AI keys in the dashboard. AI review is optional and off until you add your own key. The key is stored in your account folder, shown only as its last four characters, used only when you run an AI review, and deleted when you remove it. An AI review sends excerpts of your code to the provider you chose (Anthropic or OpenAI), under your account with them and billed to you; we never provide or pay for a key.
- Checkout. The payment form on the home page is Stripe's: it loads Stripe's script and frame, and your card details go to Stripe, not to us.
- Page-view counter. The footer shows how many page views the site has had. It is one number: no address, no cookie and no identifier is stored for it. Views from robots are not counted.
- Cookies and your browser. One session cookie after you sign in, to keep you signed in for 12 hours. No advertising or tracking cookies, and no analytics or advertising scripts. Your language and light / dark choices are kept in your browser (local storage) and are not sent to us.
- Fonts. The pages load their fonts from Google Fonts, so your browser contacts Google (and Google sees your address) when a page loads. Nothing else on the pages comes from a third party, except Stripe's form at checkout.
- Logs. We keep no web access log of our own (no address or page list). Our hosting (Amazon Web Services) keeps its usual operational records of our service, without page content. A sign-in link request is limited to one per minute per e-mail address, which is kept for that minute only.
- E-mail. We send sign-in links and messages about your purchase (the purchase e-mail has your personal download link), nothing else. E-mail is sent through Amazon SES.
- Where it lives. Amazon Web Services (United States, us-east-1: storage, the service, e-mail) and Stripe (payments).
- The command line tool. It does not contact us. If you use its cloud commands, it talks to your own cloud account; if you add an AI key, to the provider you chose.
- Contact. support@hpc-labs.ai. Deletion and access requests: write to that address.