Privacy Policy
This Privacy Policy describes how ContractScan (“we”, “us”) collects, uses, and shares information when you use https://contract-scan.dev and related services (the “Service”). Contact: support@contract-scan.dev.
Who we are
ContractScan provides automated static analysis of Solidity source code (including tools such as Slither and Aderyn, pattern checks, and AI-generated explanations). It is not a professional security audit.
Information we collect
- Contract source you submit. Source you paste or send to the API is processed in a temporary directory for compilation and static analysis, then deleted after the scan. We do not keep your source as a lasting archive.
- Scan and usage data. Anonymous or lightly attributed usage counters (for example free-tier limits), scan identifiers you may reference in feedback, technical logs needed to run and secure the Service, and optional feedback you choose to send.
- Payment records. If you pay with USDC on Base (or similar on-chain payment we support), we process the transaction hash, redeem codes, credit balances, and related payment metadata needed to fulfill your purchase. We never ask you to sign arbitrary messages or approve token spending allowances for ContractScan payments described on the site.
- Newsletter email. If you subscribe, we store your email address, signup time, and the page you signed up from. No tracking pixels for the newsletter form beyond what is needed to run the form. We do not sell or share newsletter emails for advertising.
- Support email. If you email us, we receive whatever you include in that correspondence.
- Technical data. IP address (or equivalent) for rate limits and abuse prevention, user agent, and standard server request metadata.
How we use information
- To run scans, return results, enforce free-tier and paid limits, and deliver redeem codes.
- To operate, secure, debug, and improve the Service.
- To send product or blog updates you opted into, and to respond to support requests.
- To comply with law and protect against fraud or abuse.
AI processing
Parts of a scan report (for example plain-language explanations or optional patch suggestions) may be produced with third-party AI providers. Verdict labels are computed from static-analysis findings, not chosen by the AI. Do not submit secrets, private keys, or personal data you are not willing to process through the Service and its processors.
Sharing
We do not sell your personal information. We may share limited data with infrastructure and payment or compliance providers who process it on our behalf (for example hosting, email delivery, analytics that we configure without selling data, and payment or identity providers you interact with during checkout or account setup). When you buy a digital product through Creem checkout, Creem acts as merchant of record and may receive buyer email and payment data needed to process that purchase. We may disclose information if required by law or to protect rights and safety.
Retention
- Submitted contract source: deleted after the scan completes (temporary processing only).
- Payment and redeem-code records: kept as long as needed for fulfillment, accounting, dispute handling, and legal obligations.
- Newsletter emails: until you unsubscribe or ask us to delete them.
- Logs and abuse-prevention data: kept for a limited operational period.
Your choices
- Unsubscribe from the newsletter any time by emailing support@contract-scan.dev.
- Request access, correction, or deletion of personal data we hold about you by emailing the same address. We may need to verify the request and keep some records where law requires.
Children
The Service is not directed at children under 16. We do not knowingly collect personal information from children.
International users
The Service may be hosted or processed in jurisdictions different from yours. By using the Service you understand that information may be transferred to those locations with appropriate safeguards where required.
Changes
We may update this policy by posting a new version on this page and changing the “Last updated” date. Material changes may also be called out on the site or by email when appropriate.
Contact
Questions about privacy: support@contract-scan.dev.