Legal
Privacy Policy
Effective date: June 27, 2026
01 Information We Collect
We collect information you provide directly, such as your name, email address, organization, and the target descriptions you submit for analysis. We also collect limited technical information necessary to deliver our services, including engagement metadata and communication records. We do not collect more than what is required to provide and improve our autonomous security research services.
02 How We Use Information
We use the information we collect to conduct engagements, deliver findings and disclosure packages, coordinate with maintainers, communicate with you, and improve our platform. We do not sell your personal information. We do not use your source code or findings to train third-party models, and we do not share engagement data with external AI providers.
03 Sandbox Isolation
Every analysis runs in an isolated, ephemeral sandbox. No source code or findings data persists after engagement completion — environments are destroyed once a task concludes. Critically, no source code, target data, or findings are shared with third-party AI providers. Your code never leaves the controlled Vorthix infrastructure, and isolation is enforced at the infrastructure level rather than by policy alone.
04 Data Retention
We retain personal contact information only as long as necessary to maintain our business relationship and to comply with legal obligations. Target source code and analysis artifacts are not retained beyond the lifetime of the sandbox in which they are processed. Disclosure packages delivered to you are retained according to the terms of your engagement and may be deleted upon request.
05 Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export the personal information we hold about you, as well as the right to restrict or object to certain processing. We honor GDPR rights including access, deletion, and portability. To exercise any of these rights, contact us using the details below and we will respond within the timeframes required by applicable law.
06 Cookies and Tracking
Our website uses minimal cookies and tracking, limited to essential functionality and privacy-respecting analytics that help us understand aggregate usage. We do not use advertising trackers or sell behavioral data. You can control cookies through your browser settings, though disabling some may affect site functionality.
07 Contact for Data Requests
For any privacy or data-related requests, contact us at contact@vorthix.com. We will respond promptly and in accordance with applicable data protection law.