Privacy Policy

ShipShield is operated by Hardik Desai (sole proprietor), based in India. This policy explains what personal data we collect when you use ShipShield, why, and the choices you have. Questions can be sent to support@shipshield.dev.

• Account data: your name, email address and sign-in details, handled by our authentication provider.
• Scan data: the URLs you submit, the publicly served page and script content we fetch from them, and the findings we produce.
• Billing data: your plan, subscription status and payment records. Card and bank details are entered with our payment processor and never stored by us.
• Usage data: basic technical logs such as IP address and request times, used to keep the service secure and working.

• To run scans and show you the results.
• To manage your account, subscription and payments.
• To send transactional emails such as payment receipts and cancellation notices.
• To prevent abuse and keep the service secure.
• To improve scan accuracy and fix bugs.

To judge whether a possible finding is a real problem, we may send a short excerpt of the public code around that finding to an AI model provider (currently Anthropic, OpenAI, Groq or Google, depending on our configuration). We send only what is needed for that check. We do not send your account details, and we do not sell your data.

We share data only with providers that help us run the service:

• Clerk — authentication and account management.
• Razorpay — subscription billing and payments.
• Resend — transactional email.
• Vercel — hosting.
• Upstash QStash — background job queue for scans.
• Browserless — headless browser rendering of scanned pages.
• AI model providers listed above — scan verification.

We keep your data while your account is active. If you delete your account, we also delete your subscription, payment and scan records from our database, except where we must retain something to meet legal or tax obligations. To request deletion, email support@shipshield.dev.

Under applicable law, including India's Digital Personal Data Protection Act, 2023, you may ask to access, correct or erase your personal data, or withdraw consent. Email support@shipshield.dev and we will respond within a reasonable time.

We use encryption in transit, access controls and managed providers to protect your data. No system is perfectly secure; if you find a vulnerability, please follow our responsible disclosure process.

We may update this policy as the product changes. The date at the top shows the latest revision, and we will notify account holders of material changes.