What we collect, why, and your rights.
Account details, the domains and repositories you connect, and scan results. We do not hoard your code.
To run scans, draft fixes, and produce signed evidence. Logs are scrubbed of secrets and PII.
You can connect Opviva to Claude, ChatGPT, Cursor, and other AI tools over the Model Context Protocol. When you do, that assistant can call Opviva tools on your behalf using an OAuth token — or a scoped API key — tied to your account. The inputs you or the assistant submit through a tool call (live URLs, repository names, or file contents) are processed only to produce security findings and fixes, under the same terms as scans you run inside Opviva. We do not train models on them, and we do not hand them to the AI provider beyond what is needed to return the result to your chat. You can review every connected assistant, see when it was last used, and revoke it at any time from Settings → Connected apps — revoking immediately invalidates that assistant's access and refresh tokens.
Export or delete your data at any time from account settings. Deleting your account is permanent and removes all your data, including any remaining credit balance.
This is a plain-language summary. The full, canonical policy lives on opviva.com.