Privacy Policy

Account data — name, email, hashed password, role, company details, and profile information you provide. When you sign in with Google we receive your email, name and avatar.

Product data — content you create or upload, such as marketing campaigns, testing projects, bug reports and surveys.

Code & repository data — for Tsheks AI Scan, we access repositories you explicitly connect via GitHub in order to analyse them. Access tokens are encrypted at rest.

Usage & payment data — credit balances, transactions, and payment metadata processed by our payment providers. We do not store full card numbers.

To provide and operate the products, authenticate you across the ecosystem, process payments, generate AI results, prevent abuse, provide support, and improve our services.

AI features send the minimum necessary content to our AI provider (DeepSeek) to produce results. Payments are processed by Stripe, Flutterwave and Paystack. GitHub is used for repository access. Each provider processes data under its own terms.

AI scan jobs and their results are automatically deleted according to your retention setting, which can be configured from 1 up to 7 days (one week maximum); the default is 7 days. Credit transactions are retained as an accounting record. Account data is retained while your account is active and for a reasonable period afterwards to meet legal obligations.

We use cookies and similar storage for authentication (Tsheks ID single sign-on), security, and preferences. You can control cookies through your browser, but essential cookies are required to stay signed in.

We use encryption in transit, encrypted storage for sensitive tokens, hashed passwords, and access controls. No system is perfectly secure, so please use a strong, unique password.

Depending on your location, you may request access to, correction of, or deletion of your personal data. Contact us to exercise these rights.

Questions? Email privacy@tsheks.com.