QorVertex is self-hosted software: you run it on your own servers, and the code it analyzes stays there. This policy explains the small amount of information that does reach us, why, and what you can ask us to do with it.
"We" means [QorVertex legal entity name and address].
Your source code never reaches us
QorVertex scans repositories inside your own installation. We do not receive your source code, repository or file names, symbols, database schemas, scan results, or source-control credentials. If you turn on the product's AI chat, questions go from your installation to the AI provider you configure (for example, your own AWS Bedrock or Google Vertex AI account), not to us.
What we collect when you register
- What you enter: name, company, email address and phone number, plus job title and country if you give them.
- Your IP address and the time you registered. We use these to limit how many registrations can be made from one address and to stop abuse.
We use this to confirm your email address, issue and send your license key, and contact you about your license and account.
What your installation sends us
About once a day, a licensed installation checks in with our license server. Each check-in sends:
- your license key;
- the number of lines of code under analysis (a single total, which is how tiers are metered);
- the QorVertex version;
- an installation identifier, which is a one-way hash of the server's hardware ID and database ID. The raw IDs never leave your server;
- the IP address it connects from, and the time.
We use this to enforce license tiers and limits, to detect a key being used on more than one installation, and to renew your license. A Free license stops working if it goes a year without checking in.
We send email only about your registration, your license and your account. That covers confirmation links, your key, approaching or exceeding your limit, and changes to your license. We keep a record of each message: the address, the kind of message, and whether it was sent. If a message to you bounces permanently or you mark it as spam, we record that and stop emailing that address.
This website
qorvertex.com sets no cookies and uses no analytics, advertising or tracking scripts. Like any web server, the network that delivers it may record your IP address and the pages you request in its operational logs.
Who processes it for us
- Amazon Web Services (United States, us-east-1 region). It hosts the license server, its database, this website, our server logs, and the email we send.
- Google Workspace receives mail sent to our addresses, such as support@qorvertex.com.
- Cloudflare provides our DNS. It answers address lookups for our domain, but website and license traffic does not pass through it.
We do not sell personal information or share it for advertising.
How long we keep it
Account and license records are kept while your license exists. [Retention periods for registration attempts, check-in history, email records and server logs to be decided.]
Your choices and rights
Email support@qorvertex.com to see, correct or delete your information. Deleting your account revokes its license keys. Depending on where you live, you may have further rights under laws such as the GDPR or California's CCPA. [Legal basis for processing, international-transfer mechanism, and EU/UK representative to be confirmed by counsel.]
Security
Data travels encrypted (TLS), and the database is reachable only from our license server. License keys are signed with a key held in a hardware-backed key service, and the private half never sits on a server we operate.
Children
QorVertex is a business product and is not directed at children under 16.
Changes
If this policy changes, we will update the date above. If a change is material, we will also email registered users.