Privacy Policy

What Clarobit is

Clarobit is a security and privacy scanner for websites. When you scan a site, Clarobit fetches only what any anonymous browser visitor would see — the public HTML and JavaScript bundles your site already serves to everyone. We do not access your database, your backend, your source code, or anything that requires authentication.

What we collect and why

When you run a free scan (no account):

• The URL you submitted
• Your IP address (used to enforce free-scan limits and prevent abuse)
• The scan findings (exposed secrets detected, trackers found, privacy claims checked)

We store these to show you your report and to enforce fair use limits. We retain scan data to provide the service and may delete it at our discretion.

When you create an account:

• Your email address (used to log you in)
• Your account plan (Free, Starter, or Growth)
• The sites you add to monitoring
• Your scan history across all monitored sites

Account data is retained for as long as your account is active. You can request deletion at any time.

When you use continuous monitoring (paid plans):

Clarobit automatically re-scans your monitored sites on a weekly (Starter) or daily (Growth) basis. Each re-scan stores the same findings data as a manual scan. You can pause or remove monitoring at any time from your dashboard.

What we do not collect

• We never access the actual content of your database or user data
• We never store the real values of exposed secrets we find — only a masked reference (e.g. “sk_live_...”) so we can describe the finding without holding the credential itself
• We do not sell, share, or monetize your data with third parties
• Neither we nor our AI provider trains models on your scan data (per Anthropic's API terms)

Third parties

Clarobit uses the following services to operate:

• Supabase — database and authentication
• Vercel — hosting and infrastructure
• Anthropic— AI analysis for privacy claims checking (scan content is sent to Anthropic's API for this feature)

Your rights

You can request deletion of your account and all associated data by emailing privacy@clarobit.com. We will process deletion requests within 30 days, including data from free scans run without an account.

If you are in the EU or UK, you have additional rights under GDPR/UK GDPR including the right to access, correct, or port your data. Contact us at the email above.

Data retention summary

• Free scan data: retained to provide the service; deleted at our discretion or on request
• Account data: retained until account deletion
• Monitoring history: retained until you remove the site or delete your account
• IP addresses: retained with scan records, deleted on the same terms

Contact

For privacy questions or deletion requests: privacy@clarobit.com