Privacy Policy
REAShield is operated by Q-Axiom ("we", "us") in Australia. This policy explains what personal information we collect through reashield.q-axiom.com.au, the REAShield command line tool and our emails, why we collect it, and your choices. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
The short version: the code you scan is analysed in memory and not stored. We keep your email address when you give it to us or subscribe, and the payment and licence records needed to run your subscription. We do not run advertising or tracking cookies, and we do not sell personal information.
What we collect
- Code you scan. When you use the web scanner, the files you select are sent to our server, analysed in memory to produce a score and findings, and then discarded. We do not store your code or the findings. The command line
scancommand runs on your machine and does not upload your code. - Email and lead details. If you enter your email (for example to receive a report or start checkout), we store the email address, the score and app name shown for that scan, which part of the site you used, and your browser's user agent string.
- Subscription and licence records. When you subscribe we store your email, subscription tier, a Stripe customer and subscription identifier, and the licence key we issue. The command line tool sends your licence key to our server to check that it is valid.
- Payment details. Card details are entered on Stripe's checkout page and handled by Stripe. We never see or store your full card number.
- Technical logs. Our hosting provider records standard request information such as IP address, time, page requested and error messages, which we use to keep the service running and secure.
- Browser storage. The site stores your light or dark theme choice in your browser. We do not use advertising or analytics cookies. Stripe and our hosting provider may set their own cookies where needed for checkout and security.
How we use it
- To run the scanner and show you results.
- To take payment, issue and verify licence keys, and give you access to paid features.
- To email you your licence key and respond to your questions or support requests.
- To send occasional product emails to people who asked for them. Every such email has an unsubscribe link, and you can unsubscribe any time at reashield.q-axiom.com.au/unsubscribe.
- To keep the service secure, prevent abuse and meet legal and tax obligations.
Who we share it with
We use these service providers to operate REAShield. They handle personal information only to provide their service to us:
- Vercel (website hosting and serverless functions).
- Supabase (database for leads, subscriptions and licences, hosted in the United States).
- Stripe (payment processing and subscription billing).
- Resend (sending licence and service emails).
Some of these providers store or process information outside Australia, including in the United States and Japan. By using the service you understand that your information may be handled overseas. We take reasonable steps to choose providers with appropriate security and privacy practices. We may also disclose information where the law requires it. We do not sell personal information.
How long we keep it
We keep lead and email records until you ask us to delete them or unsubscribe (we keep your email on a suppression list after unsubscribing so we do not contact you again). We keep subscription and licence records for as long as your subscription is active and afterwards for as long as we need them for accounting, tax and dispute purposes. Technical logs are kept by our hosting provider for a short period.
Security
Our database tables are not publicly readable, secrets are kept server side, and all traffic uses HTTPS. No online system is perfectly secure, so we cannot guarantee absolute security. If we become aware of a data breach likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required.
Your rights
You can ask to access the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing us at the address below. We will respond within a reasonable time, normally within 30 days. If you think we have mishandled your information, contact us first so we can fix it. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Children
REAShield is a developer tool and is not directed at children under 16. We do not knowingly collect their personal information.
Changes
We may update this policy as the service changes. The date at the top shows when it last changed. Material changes will be flagged on the site.
Contact
Q-Axiom, Australia
Email: smyasser2004@gmail.com