Privacy Policy

1. Scope of this policy

This Privacy Policy explains what information Weurkico collects when you use our website and verification platform (the "Service"), how we use it, who we share it with, and the rights you have over your data. It applies to visitors, account holders (clients and engineers), and anyone whose code is submitted for verification.

2. Information we collect

Account information

• Email address, password (stored hashed), name or company name, account type (company or individual), and chosen plan.
• Profile details you add later (role, specialization, settings).
• Email verification status and security settings (two-factor authentication).

Billing information

• Payments are processed by Stripe. We receive and store your Stripe customer ID, subscription status, plan, and credit balance - never your full card number, which stays with Stripe.

Submitted content

• Applications, repositories, archives, and metadata you submit for verification, along with the resulting analysis, findings, verdicts, and reports.

Usage and technical data

• Log data (IP address, browser, pages visited, timestamps), session information, and product usage (verification runs, dashboard activity).
• Cookies and similar technologies - see our Cookie Policy.

3. How we use your information

• Provide the Service: run verifications, generate reports, escalate cases to human reviewers, operate your account.
• Billing: process subscriptions and credit packs, enforce quotas and entitlements.
• Security: authenticate users, detect abuse, enforce rate limits, protect accounts.
• Communication: transactional emails (verification codes, receipts, security alerts) and support replies.
• Improvement: analyze aggregated, de-identified usage to improve verification quality and the product.

4. Your code is confidential

Code and applications you submit are treated as confidential. They are accessed by the automated verification pipeline and - only where your plan includes it - by vetted human reviewers bound by confidentiality obligations. We do not sell submitted code and we do not use it to train models for other customers.

Reviewer and staff access is strictly case-scoped and fully audited: sensitive actions such as source-code viewing and report downloads are logged with the actor and timestamp. Any unauthorized use, retention, or disclosure of client data by a reviewer, engineer, or staff member is a material breach of our Terms - it leads to immediate termination and may result in legal proceedings, including claims for damages and referral to competent authorities.

Do not submit personal data, secrets, or credentials inside your submissions. If your code contains third-party data, you are responsible for having the right to submit it.

5. Who we share information with

• Stripe - payment processing, subscriptions, billing portal.
• Email provider - delivery of transactional emails (verification codes, notifications).
• Human reviewers - only the submissions escalated to expert review under your plan, under confidentiality obligations. Access is case-scoped, logged, and audited; misuse leads to termination and legal action.
• Infrastructure providers - hosting and databases needed to operate the Service.
• Legal - where required by law, regulation, or to protect rights and safety.

We do not sell personal information.

6. Data retention

• Account data is kept while your account is active.
• Verification runs, findings, and reports are retained so you can access your history; deleting your account removes associated personal data subject to legal retention duties.
• Email verification codes expire after 10 minutes and are never stored in plain text.
• Uploaded source archives (ZIP files) are kept for 30 days after upload so you can request a re-verification against the exact same code. They are then permanently deleted by an automated job. Deleting a project removes its source archive immediately.
• Every reviewer or staff access to your code is scoped to the assigned case and recorded in an immutable audit log (who, what, when).
• Server logs are kept for a limited period for security and debugging.

7. Security

We use encryption in transit, hashed password storage, role-based access control, email verification, optional two-factor authentication, rate limiting, and audit logging. No system is perfectly secure, but we work to protect your data and your code to a professional standard.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• access, correct, or export your personal data;
• delete your account and associated data;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• lodge a complaint with a data protection authority.

To exercise these rights, contact us at support@weurkico.com.

9. International transfers

The Service may be operated and data processed in countries other than yours. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy as the Service evolves. Material changes are announced with reasonable notice in-product or by email. The date at the top of this page shows the latest revision.

12. Contact

Privacy questions or requests? Reach us through the contact page or at support@weurkico.com.