Privacy Policy

Controller: ExtensionOps operator. Contact: contact details provided at checkout.

ExtensionOps processes repository identifiers, source files selected for release analysis, generated findings, release evidence and account/integration metadata required to provide the service.

Public repository scans are designed for static analysis and do not execute repository code. A public scan is processed for the requested analysis; saved evidence is retained only when a user creates an account, purchases a service or explicitly saves the result.

For connected GitHub repositories, access is limited to permissions required for the selected repositories and release workflow. Chrome Web Store publishing credentials are intended to remain in customer-owned GitHub/Google infrastructure.

Payment processing is provided by Stripe. Stripe receives payment and billing information under its own terms and privacy framework; ExtensionOps should not receive full card numbers.

Operational logs may contain IP address, request metadata, security events and identifiers needed to prevent abuse and investigate incidents. Data is retained only for as long as necessary for service delivery, security, accounting and legal obligations.

Users may request access, correction or deletion where applicable by contacting the controller.