Back to Scanner

Privacy Policy

Effective Date: November 2026 • Last updated: v2026.11

1. Zero Code Retention Architecture

AdaLab is built on a strict Zero Code Retention guarantee. When you run audits via our web console, the standalone npm client (adalab-scanner), or our GitHub Action:

  • Source files and tool definitions are parsed into AST syntax graphs inside an ephemeral, in-memory sandbox.
  • We do not store, clone, or persist your source code on our disks or databases.
  • Once vulnerability vector scoring and report generation are finished, the in-memory execution buffers are purged immediately.

2. Information We Collect

Account & Contact Data: When submitting an MCP server or completing a checkout, we record your email address and GitHub repository URL to deliver reports and badge credentials.

Payment & Billing Data: Payment card details are tokenized and processed exclusively by Stripe (PCI-DSS Service Provider Level 1). AdaLab never sees, handles, or stores your raw credit card numbers or security codes.

Infrastructure & Edge Telemetry: Standard edge routing metadata (IP addresses, request latency, and HTTP status codes) are processed by Cloudflare Workers solely for DDoS defense, rate-limiting, and operational stability.

3. Data Protection & Compliance (GDPR & CCPA)

We comply with applicable global privacy frameworks including GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act). You possess the following rights:

  • Right of Access: Request a copy of all personal contact records associated with your account.
  • Right to Erasure ("Right to be Forgotten"): Request immediate deletion of your registered email and repository references.
  • No Sale of Personal Data: We never sell, rent, or trade your personal data or codebase information to third parties or AI model trainers.

4. Third-Party Subprocessors

We partner exclusively with enterprise infrastructure providers that adhere to stringent security standards:

Stripe, Inc.

Payment Gateway & Billing Infrastructure

Cloudflare, Inc.

Global Edge CDN, DNS & Edge Compute

5. Privacy Officer & Inquiries

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our security team:

Security & Privacy: AdaLab Data Protection

Website: https://adalab.cc

Email: support@adalab.cc