Privacy Policy

This Privacy Policy explains how Trident Softwares Private Limited (“we”, “us”, “our”) collects, uses, and shares information when you use SecHound at sechound.com. SecHound is a product of Trident Softwares Private Limited, Pakistan.

Questions: support@sechound.com.

1. Who we are

Trident Softwares Private Limited operates SecHound, a developer security scanner. You run scans locally with our CLI. Optional account features (dashboard, API keys, AI explanations, and paid plans) are provided through our website.

2. Information we collect

We collect only what we need to run the service:

• Account data. When you sign in with Google we receive your name, email address, and profile image.
• Session data. Authentication cookies keep you signed in.
• Scan reports. If you upload or sync a scan, we store finding metadata such as rule IDs, file paths, line numbers, severity, and redacted evidence.
• API keys and CLI sessions. We store hashed keys and device-login records so you can authenticate the CLI.
• Billing data. Paid plans are processed by Paddle, our Merchant of Record. We store Paddle customer and subscription identifiers so we can apply your plan and credits. We do not store full card numbers.

3. Information we do not collect

Normal SecHound scans keep source code on your machine. We do not receive your repository, environment files, or raw credentials from a secret scan. AI explanations use redacted finding context. If you use the optional Secure Coding Assistant, the CLI shows the selected source files and asks for approval before sending redacted snippets to the AI service. Environment and credential files are excluded.

4. How we use information

• To create and maintain your account, dashboard, and CLI access
• To store scan history according to your plan
• To generate optional AI explanations of findings
• To process subscriptions, credits, and support requests
• To keep the service secure and prevent abuse

5. Processors we use

• Google, for sign-in
• Paddle, as Merchant of Record for payments and receipts
• AI model providers (via OpenRouter) for optional finding explanations
• Our hosting provider, to operate sechound.com

These processors receive only the data needed to provide their service. Paddle’s handling of payment data is governed by Paddle’s own privacy policy.

6. Cookies

We use essential authentication cookies so you can stay signed in. We do not use advertising cookies or sell personal data.

7. Retention

We keep account data while your account is active. Scan history retention follows your plan (7 days on Free, 90 days on Pro, 1 year on Team). You can ask us to delete your account and associated data by emailing support@sechound.com.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you. Contact support@sechound.com. We will respond within 3 business days.

9. Children

SecHound is intended for developers and is not directed at children under 16. We do not knowingly collect their personal data.

10. International transfers

Trident Softwares Private Limited is based in Pakistan. Your information may be processed in other countries by the processors listed above, with safeguards appropriate to the service.

11. Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use of SecHound after an update means you accept the revised policy.

12. Contact

Trident Softwares Private Limited
Pakistan
Product: SecHound (https://sechound.com)
Support: support@sechound.com