Legal

Privacy Policy

Last updated October 2026

The short version: Code you upload for scanning is deleted as soon as the scan finishes. We keep the scan results, not your code. Only anonymized scan patterns contribute to platform intelligence.

Data we collect

Smartriarch is designed to minimize the data it touches. The categories of information that may be processed:

Code you submit to the scanner. Written to a temporary folder on our server while the scan runs and deleted when it finishes (within an hour if a scan is interrupted). We keep the name and severity of each rule that matched, the file name or path and line numbers, and the explanation and fix we generated. We do not keep source code, code snippets, credentials, or file contents.
Contract documents you upload to the compare tool. Sent to the Claude API to extract your rates and fees, then discarded. We do not store the document, its text, or the extracted rates; the results are shown in your browser only.
Email address. Captured only when you explicitly unlock a paid report or opt into early-supporter updates.
Anonymized scan and checklist metadata. Aggregate patterns (rule hit rates, processor distribution, stack mix) used to improve the platform, never linked back to your identity or your code.

How we use it

Smartriarch uses the information above only to:

Deliver the scan, checklist, comparison, and monitoring features you request.
Improve detection rules and platform intelligence using anonymized, aggregated patterns.
Communicate with you about your account, scan results, or early-supporter updates if you opted in.

We do not sell your data, share it with processors, or use it for advertising.

Aggregate Research Data

Smartriarch may use anonymized, aggregated scan findings, including rule identifiers, severity classifications, processor types, and industry categories, to produce industry research and compliance intelligence reports. No source code, company names, or individually identifying information is included in any aggregate analysis. Enterprise customers may opt out of aggregate data contribution by contacting andrea@smartriarch.com.

Third-party services

Smartriarch uses the Anthropic Claude API to generate plain-English explanations for scan findings and to extract structured data from uploaded contracts. To write explanations, we send Claude the rule that matched, its description and severity, and the file path and line number, never your code. Explanations and contract data extraction are processed by Anthropic's Claude API under Anthropic's commercial terms, which prohibit Anthropic from training models on this content. Anthropic states that it automatically deletes API inputs and outputs within 30 days, with limited exceptions such as legal requirements and policy enforcement. See Anthropic's commercial terms and privacy center.

Your choices

You may request deletion of any captured email at any time by contacting us. Scan results stored in your browser's localStorage can be cleared by you directly from your browser. We do not set advertising cookies.

Security Disclosures

To report a security vulnerability, please email security@smartriarch.com. We aim to respond within 48 hours and will work with you on responsible disclosure.

Contact

Questions or requests related to this policy can be sent to help@smartriarch.com. We aim to respond within 7 business days.