Privacy Policy

We collect the following categories of information:

• Account Information: Name, email address, company name, and billing information when you create an account or subscribe to our services.
• Repository Data: When you grant repository access, we access code files, commit history, pull requests, and related metadata necessary to provide our scanning and fixing services. We process this data only as directed by you.
• Usage Data: Information about how you interact with our services, including scans initiated, fixes applied, and features used.
• Device and Browser Information: IP address, browser type, operating system, and device identifiers collected automatically when you access our website or services.
• Communications: Information you provide when contacting support or communicating with us.

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our code scanning, fixing, and governance services.
• Account Management: To create and manage your account, process payments, and communicate about your subscription.
• Security: To detect, prevent, and respond to security incidents, fraud, and abuse.
• Analytics: To understand how our services are used and to improve user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Marketing: With your consent, to send promotional communications about our services.

Your code is your property. We access repository data solely to provide our services. We do not sell, share, or use your code for any purpose other than delivering the services you have requested. Code data is processed in memory during scans and fixes, and we do not retain copies of your source code after processing is complete, except for metadata necessary to display scan results and fix history in your dashboard.

We may use aggregated, anonymized data about code patterns (not your actual code) to improve our scanning algorithms and fix quality. This data cannot be used to identify you or reconstruct your code.

We share information only in the following circumstances:

• Service Providers: With vendors who help us operate our services (cloud hosting, payment processing, analytics), under contracts that protect your data.
• Affiliates: With Iru Inc. and its subsidiaries for business operations and support.
• Legal Requirements: When required by law, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you direct us to share information with third parties.

We retain account information for as long as your account is active or as needed to provide services. Scan results and fix history are retained until you delete them or close your account. We may retain certain information as required by law or for legitimate business purposes.

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission or storage is completely secure.

Depending on your location, you may have the following rights:

• Access and receive a copy of your personal information
• Correct inaccurate personal information
• Delete your personal information
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is based on consent
• Opt out of marketing communications

To exercise these rights, contact us at privacy@gethyrax.com.

We use cookies and similar technologies to operate our website, analyze usage, and deliver targeted advertising. You can manage cookie preferences through your browser settings. For more information, see our cookie banner when you first visit our site.

Hyrax is based in the United States. If you access our services from outside the US, your information may be transferred to and processed in the US. We use appropriate safeguards for international transfers, including standard contractual clauses.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of sales of personal information. We do not sell personal information.

For privacy-related questions or to exercise your rights:

Hyrax LLC
A wholly owned subsidiary of Iru Inc.
2811 Ponce de Leon, PH1
Miami, FL 33134, USA
privacy@gethyrax.com

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of our services after changes constitutes acceptance of the updated policy.