What SafeWeave stores
- Your account: your email, your plan and a hashed password (never the password itself).
- Scan results: findings, their severity and file paths, and a short excerpt of code around each finding so you can fix it in context.
- Scan history: when each scan ran and what it found.
- App URL scans: the address you scanned and what the checks found.
What SafeWeave never stores
- Your repository. Cloud scans run in a temporary, isolated environment, and the copy of your code is deleted when the scan finishes.
- Code excerpts for secrets. A secrets finding never keeps the code around it.
- Data from your live app. Live checks name tables, buckets and files, never their contents.
- Your card details. Payments are handled by Stripe.
Scans from your editor and terminal
On Free, they run on your computer. Only severity counts are sent to your dashboard: no findings, file paths or repository names. Add --no-report to send nothing. See Scan from the terminal.
With a Cloud or Cloud Plus key, scans your AI assistant starts in your editor run on SafeWeave's servers by default: your project's files are sent over HTTPS for the scan, except .env files. Set the environment variable SAFEWEAVE_SCAN_MODE=local to keep them on your computer. The terminal command always scans on your computer.
AI fixes
AI fixes are optional. When you click Explain & fix with AI, that finding and its code excerpt are sent to Anthropic's API, which doesn't train on this data.
Public sharing
Share links and README badges show only your score, grade and severity totals, never findings, file paths or your email. Turn sharing off any time with Disable public sharing in Settings.
Disconnecting
Disconnecting a repository deletes its code excerpts and AI answers. Finding counts and scan history are kept.
Deleting your account
Email support@safeweave.dev from the address on your account and ask for your account to be deleted. We delete your account and its data. Cancel any paid subscription first, in Settings.
More
Read the full privacy policy and security overview.