PHPGuard — Privacy Policy

Who we are

PHPGuard is operated by RoboTech (studio.robotech.si). For any privacy question or request, contact us at info@robotech.si.

What we collect

Account data — name, email address, and password (stored hashed, never in plain text).
Billing data — company name, tax number, and billing address, if you provide them. Card details are never seen or stored by us — they go directly to our payment processor, Stripe.
Server monitoring data — the name you give a server, and the status reports our monitoring agent sends (disk/RAM usage, dependency versions, header/config checks). The agent is built to never transmit secrets — it does not send the contents of your .env file or similar files.
Integrations — a Slack webhook URL, if you choose to connect one (stored encrypted).
Free scanner submissions — the domain (and optional composer.lock contents) you submit to the free, no-account scanner is used only to produce your report and is not stored afterward.
Basic traffic data — an internal, anonymous count of landing-page visits (just a timestamp and path, no IP address or identifier attached), used to gauge overall traffic.
Cookies and analytics — see the section below.

Cookies

We use two categories of cookies / local storage:

Necessary

Keeps you signed in and protects forms against cross-site request forgery. The site cannot function without these. No consent is requested for these, per applicable law.

Analytics (optional)

If you consent, we use Google Analytics to understand aggregate traffic to the site. This sets cookies and shares data with Google; see Google's Privacy Policy for how they handle it. You can change your choice at any time below.

Why we process it

To provide the account and monitoring service you sign up for, to process payment for a paid plan, to alert you about issues we detect, and — only with your consent — to understand aggregate site traffic.

Who we share it with

Stripe — payment processing for paid subscriptions.
Google Analytics — only if you consent to analytics cookies.
Slack — only the alert messages you've configured, sent to the webhook URL you provided.

We do not sell your data, and we do not share it with anyone else.

How long we keep it

Monitoring findings are automatically deleted after 30 days. Account and billing data is kept for as long as your account is active, plus any period required by law (e.g. invoicing records). You can request deletion at any time — see below.

Your rights

Under GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict its processing, and request a copy of it in a portable format. You can delete your account and its data yourself from your account settings, or contact us at info@robotech.si for anything else.