Privacy Policy
Effective June 9, 2026 · NxGen Tech Solutions (“we”, “us”)
RepoScope is a local-first VS Code / Cursor extension. This policy describes what data we collect, why, and your choices. Contact: support@reposcope.app.
What stays on your machine
- Code scans — Cost, budget, security, compliance, and repo-map analysis run locally via bundled ast-grep (and optional local Python or Semgrep when you configure them).
- Security findings — Vulnerability results are computed in your editor; we do not upload your source code or scan results to our servers by default.
- Game Plan —
.reposcope-gameplan.jsonis stored in your workspace unless you choose to commit or share it.
What we may collect
- Anonymous product telemetry — Optional funnel events (e.g. tab opened, trial started). Disable with the
reposcope.telemetrysetting. - License & trial checks — When you use Pro or start a trial, the extension may call our Insight API with your Stripe customer id (
cus_…) or a device identifier (machineId) to verify entitlement and enforce one trial per device. - Billing — Checkout and subscriptions are processed by Stripe. We receive customer and subscription metadata needed to unlock Pro; we do not store full payment card numbers.
- Support email — If you email support@reposcope.app, we process the message to respond (and may use automated triage). Do not send secrets or full source dumps unless we ask.
Service providers
- Stripe — payments and subscription management
- Railway — hosts the Insight API at api.reposcope.app
- Vercel — hosts this marketing site at reposcope.app
- Email — support delivery and optional notifications
Retention & deletion
Telemetry and trial registry data are kept only as long as needed for product operation and abuse prevention. Stripe retains billing records per its policies. Email support threads are retained for a reasonable period to resolve issues. You may request deletion of support correspondence by emailing us from the address used to contact support.
Your rights
Depending on your location, you may have rights to access, correct, or delete personal data we hold. We do not sell your personal information. For California and similar regimes, contact us to exercise applicable rights.
Children
RepoScope is a developer tool not directed at children under 13 (or 16 where applicable).
Changes
We may update this policy; the “Effective” date above will change when we do. Continued use after updates constitutes acceptance of the revised policy.
Note: This is an accurate, good-faith summary of our current architecture. It is not legal advice — have qualified counsel review before relying on it for compliance decisions.