Privacy Policy

This Privacy Policy explains how WMAD Pvt. Ltd. (“WMAD”, “we”) handles information when you use White Defender (the “Service”). We’ve written it to describe what the Service actually does today, not generic boilerplate.

The Service processes the content you choose to submit to it, which may include:

• source code, files, or project folders you paste or upload to the Code Scanner;
• a GitHub repository URL (and, optionally, a personal access token) for the GitHub scan feature;
• a target URL you submit to the Web Recon Scanner;
• log files or log lines you submit to the SOC Log Analyzer; and
• messages you send to the AI Security Advisor.

The Service is stateless by design: as currently built, it does not use a database, and submitted code, URLs, logs, or chat messages are not persisted on our servers beyond the time needed to process that one request and return a result to your browser. A GitHub personal access token, if you provide one, is used only for that single scan request and is never stored.

If you asked us to scan a public GitHub repository, we request that repository’s contents directly from GitHub’s API to run the scan — we do not store a copy.

The AI Security Advisor and “executive summary” features send the content you provide (and/or scan findings) to a third-party AI model provider to generate a response — currently OpenRouter and/or Anthropic, depending on availability. Do not paste secrets, credentials, or information you are not authorized to share with a third-party processor into the AI Advisor or any scanner. Review the relevant provider’s own privacy policy for how they handle API request data.

See our Cookie Policy for details on what the Service currently does (and doesn’t) store in your browser.

The Service does not currently have user accounts, authentication, or persistent storage of personal data. We do not sell personal data to third parties.

Because the Service does not persist submitted content, there is typically nothing server-side to access, correct, or delete. If you believe we hold data about you and want it reviewed, contact us using the details below.

We use standard transport security (HTTPS) and take reasonable measures to protect data in transit. No method of transmission or processing is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to children under 16, and we do not knowingly collect personal data from children.

We may update this Privacy Policy as the Service evolves (for example, if we later introduce accounts or persistent storage). Material changes will be reflected by updating the “Last updated” date above.

Questions about this policy can be sent to business@thewmad.com.