Privacy Policy

Last updated: October 2026

Oxvenia is committed to protecting your privacy. This policy describes how we collect, use, and safeguard information when you use our compliance automation platform and related services.

Data Collection

We collect information you provide directly, such as account details, GitHub repository metadata required for scanning, and billing information processed through Lemon Squeezy. We do not collect or store application source code.

Data Usage

Your data is used to deliver scan results, generate SOC 2 evidence, process subscriptions, and improve platform reliability. Tenant data is isolated using Supabase PostgreSQL row-level security.

Data Sharing

We do not sell personal data. Limited access may be provided to subprocessors necessary for service delivery, including Vercel for hosting, Supabase for database services, and Lemon Squeezy for billing.

Security

We implement technical and organizational measures to protect your data, including encryption in transit, RLS-enforced database access, and structured audit logging.

Contact

For privacy inquiries, contact us at support@oxvenia.com.