Privacy Policy

Who we are and scope

SlopZero is operated by SlopZero Inc., a corporation incorporated in Delaware, United States. This policy covers slopzero.dev and SlopZero services that link to it. We determine the purposes and means of processing information described here. Privacy questions and requests may be sent to [email protected].

Information we collect

The website stores your theme preference and cookie choice in your browser, to remember your preferences. Our server can record standard request information such as request time, requested path and network address. If you contact us by email, we receive your email address, message and information you choose to provide.

Account, repository and payment features

When you use GitHub sign-in or repository access, information needed for those features may include account identifiers, profile information, email, authorization tokens, repository permissions, metadata and code you authorize us to access. GitHub passwords should be entered only on GitHub, not on this website.

When you request code scanning, submitted code, scan inputs and findings may be processed to perform the requested analysis. Processing of code is subject to the notices and choices provided with the relevant service. Use of submitted code for model training requires separate disclosure and any consent required by applicable law.

When you purchase a service, contact support or book a session, the information processed may include transaction records, contact details, messages and scheduling information, as applicable to your request.

How we use information

We use information to deliver the features you request, respond to communications, remember preferences, maintain and secure the website, investigate misuse, and comply with legal obligations. We will provide additional notice and obtain consent where required before materially different uses. We do not use personal information to make decisions about eligibility for employment, credit, housing or similarly significant matters.

Disclosure of information

Information you send us may be processed by the email and infrastructure providers needed to handle your communication or host the website. We may disclose information when required by law, to protect rights or security, or in connection with a merger or transfer of the business subject to applicable safeguards and notice requirements.

We do not sell personal information, disclose it for cross-context behavioral advertising, or conduct targeted advertising. If these practices change, we will update our disclosures and provide applicable choices before beginning the new processing.

Cookies, local storage and privacy signals

You can clear local storage or manage cookies in your browser. Clearing preferences may reset the theme and cookie-choice display. We do not use advertising cookies, analytics cookies or session replay. We do not perform cross-site advertising tracking in response to either setting of a Do Not Track signal.

Where applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, we will honor it for covered sale, sharing or targeted advertising. We do not conduct such processing. Changes to these practices are subject to the notice, consent and opt-out requirements of applicable law.

Retention

We retain communications and operational information only as reasonably needed for the purposes described here, including responding to requests, maintaining security, resolving disputes and meeting legal obligations. Retention depends on the information, the purpose and applicable requirements. Browser preferences remain until cleared or replaced.

Security and incident notification

We use reasonable administrative, technical and organizational measures appropriate to the information and services involved. No system is completely secure. If a security incident triggers a legal notification duty, we will notify affected individuals and relevant authorities in accordance with applicable United States federal and state law, including Delaware law when applicable.

United States privacy rights

Depending on your state of residence and whether the relevant law applies to our activities, you may have rights to access or confirm processing, correct inaccurate information, delete information, obtain a portable copy, and opt out of sale, targeted advertising or certain profiling. You may also have rights concerning sensitive information and to appeal a denied request. We will not unlawfully discriminate against you for exercising applicable rights.

These rights are subject to legal scope, exemptions and verification requirements. Your rights depend on applicable law and your jurisdiction.

Delaware residents

Where the Delaware Personal Data Privacy Act applies, Delaware residents may exercise its applicable access, correction, deletion, portability and opt-out rights. Send a request to [email protected]. We will respond within 45 days, with an extension of up to 45 additional days where permitted, and explain the reason for an extension.

If we deny a request, you may appeal by replying to the decision or emailing us with the subject "Privacy appeal." We will provide a written decision within 60 days. If the appeal is denied, you may contact the Delaware Department of Justice to submit a complaint.

California residents

If the California Consumer Privacy Act, as amended, applies to our processing, eligible residents may request to know, access, correct or delete covered personal information; opt out of its sale or sharing; limit certain uses or disclosures of sensitive personal information; and exercise rights without unlawful discrimination. The categories, purposes and disclosures covered by this policy are described above. We do not sell or share personal information for cross-context behavioral advertising.

Send requests to [email protected]. We will verify requests as required and respond within applicable deadlines, generally 45 days for verified access, correction or deletion requests, with permitted extensions and notice. An authorized agent may act on your behalf subject to lawful proof of authority and verification. If our processing activities require additional California notices or request methods, we will provide them before the relevant processing begins.

How to exercise rights

Email [email protected] with the nature of your request and enough information to identify the relevant interaction or account. Do not send passwords, access tokens or repository secrets. We may request information reasonably necessary to verify identity or an agent’s authority, and will use it for that purpose. Applicable exceptions may require us to retain certain records. We will explain a denial and any available appeal process. You may also contact your state attorney general or another competent regulator.

International visitors

SlopZero Inc. is a United States company. Information may be processed in the United States or other countries where service providers operate, subject to applicable safeguards and transfer requirements. This policy does not waive mandatory privacy rights under other applicable laws, and visiting the website is not treated as blanket consent to every international transfer.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact [email protected] so that we can investigate and take appropriate action. Users under 18 or the age of majority in their jurisdiction must have the parent or guardian involvement described in our Terms of Service. Any higher age threshold or consent requirement imposed by applicable law also applies.

Changes and contact

We will update the date above when this policy changes and provide additional notice or obtain consent when required for material changes. Continued use is not a substitute for consent where affirmative consent is legally required. Privacy contact: SlopZero Inc., [email protected].