Legal
Privacy Policy
Last updated: 6 October 2026
1. Controller and contact
ExtensionOps is the service name. The operator identified in the applicable checkout, receipt or invoice acts as controller for customer-account and service data where applicable. Privacy requests can be sent to extensionops.app@gmail.com.
2. Data we process
Depending on how you use the service, ExtensionOps may process repository identifiers, selected source files required for release analysis, findings, release evidence, GitHub integration metadata, account details, billing references, IP addresses and operational request logs.
3. Public repository scans
Public scans are designed for static analysis and do not execute repository code. A scan may temporarily process files required to produce the requested result. Evidence may be retained when needed for a purchased service, connected account, saved result, abuse prevention or legal obligation.
4. Connected repositories
GitHub access is limited to the repositories and permissions you authorize. Chrome Web Store publishing credentials are intended to remain in your GitHub and Google Cloud environment rather than being stored centrally by ExtensionOps.
5. Payments
Stripe processes payment and billing information. ExtensionOps receives payment status, customer identifiers, billing references and transaction metadata needed to provide the service, but should not receive full payment card numbers.
6. Why we process data
Data is processed to provide scans and remediation, operate integrations, maintain security, prevent abuse, support billing, investigate incidents and meet accounting or legal obligations.
7. Service providers
ExtensionOps relies on infrastructure and service providers such as Railway, Cloudflare, GitHub and Stripe. Data may be processed by those providers as required to operate the service and subject to their applicable terms.
8. Retention
Data is retained only for as long as reasonably necessary for service delivery, security, billing, accounting, dispute handling and legal obligations. Retention periods may differ by data type.
9. Your rights
Where applicable, you may request access, correction, deletion, restriction or portability of personal data, and may object to certain processing. You may also have the right to complain to a competent supervisory authority.