Privacy Policy

Last updated: 2 July 2026

Moult Cloud never stores your source code. The scanner runs in your CI; what reaches us is scan metadata only — file paths, line ranges, finding categories, confidence scores, and verdicts.

What we store

• Your account: email address, name, and — if you connect GitHub — your GitHub username and account id.
• GitHub App installation metadata: which account installed the App and which repositories it covers (names and ids, whether they're private, their default branch).
• Scan results, as described above, tied to commit SHAs, branch names, and pull request numbers.
• A session cookie to keep you signed in.

What we don't do

We don't sell your data, and we don't share it with third parties except the processors that run the service: our hosting provider, and Stripe for payments (your card details go to Stripe directly and never touch our servers).

Deleting your data

Removing a repository from the GitHub App installation deletes our records for it, including its scans. Uninstalling the App and deleting your account removes the rest. For anything else, open an issue at github.com/moult-rb/moult-rb/issues.