Privacy Policy
Last updated: May 2026
Seaworthy is built on a simple principle: your code is yours. We have no interest in your files, your findings, or your projects.
What we collect
We collect only the data needed to run the service: a license key and related account details for validation, payment and billing records handled through Paddle, messages you send us, and limited website analytics or crash data on the website if you consent to those features. The scanner itself does not send scan targets, file contents, file paths, or findings to our servers.
What we use it for
We use that data to validate licenses, process payments and refunds, answer support and privacy requests, operate the website, and keep the service reliable. We do not sell personal data or use it for advertising.
Analysis runs on your machine
Every scan runs entirely on your hardware. Nothing is uploaded to our servers. Your source code, file paths, and scan results never leave your computer (unless you use LLM-assisted checks, which send specific code snippets directly to your chosen provider via your own API key).
Read-only filesystem access
Seaworthy reads the files in the directory you point it at — nothing else. It cannot write, delete, or modify files. It will not crawl outside the directory you target.
LLM-assisted checks use your own API key
Some Pro checks use a large language model to analyse code context from your project. This traffic goes directly from your machine to your chosen LLM provider (Anthropic, OpenAI) using the API key you supply. It does not pass through our servers. Before an LLM check runs, Seaworthy shows a warning that code context will be sent to your provider. It does not currently show an exact payload preview.
License verification
The only outbound request to our servers is a license check at the start of each run. We verify your license key and return a time-limited token. We do not log your scan targets, findings, or any file contents during this request.
Payments and billing
We use Paddle to process payments, subscriptions, and billing. For some data involved in those transactions, Paddle acts as an independent controller; for limited processing it may act as our processor under Paddle's data processing terms. If you have questions about a payment or billing record, contact us at [email protected].
Your rights
Subject to applicable law, you may ask us for a copy of the personal data we hold about you, ask us to correct inaccurate data, request deletion, object to certain processing, restrict processing in some circumstances, or ask for your data in a portable format. To exercise any of these rights, email [email protected]. If you are unhappy with our response, you can contact your local data protection authority.
No telemetry or analytics
The Seaworthy CLI and VS Code extension collect no usage analytics, crash reports, or telemetry of any kind. There is no tracking, and no error reporting phoned home from the scanner. On this website (seaworthycode.com), we use Sentry to capture anonymous crash reports to help us keep the site functional, with all credentials and personally identifiable information (PII) strictly stripped. We also use Umami for privacy-focused web analytics, which only loads if you explicitly grant consent via our cookie banner.
Website security and bot prevention
To protect our website, forms, and digital infrastructure from abuse, malicious automated traffic, and spam, we utilize Cloudflare Turnstile, a privacy-focused bot detection service operated by Cloudflare, Inc. When you access certain areas of our website (such as forms or login pages), Cloudflare Turnstile automatically analyzes telemetry signals in the background without requiring user interaction (Invisible Mode). This analysis includes processing data such as your IP address, browser configuration, user-agent information, hardware characteristics, and session-level behavioral signals. This processing is carried out based on our legitimate interest in ensuring the security of our website and preventing fraudulent activities. Cloudflare does not use this data for cross-site tracking or commercial advertising. For more information, please review the Cloudflare Privacy Policy.
Questions
For privacy or data protection requests, email us at:
[email protected]