1.Who we are
LidTight provides free and paid security checks for apps built with AI tools. LidTight is operated from Israel.
We decide why and how your personal data is used, so we are responsible for it (in Israeli law, the “database controller”; in EU law, the “controller”).
For any question about this policy or your data, see Contact us.
2.Personal data we collect
We collect only what we need to run the Service.
| Data | When | Why |
|---|---|---|
| The link (web address) of the app you check | When you start a check | To run the check and save its results |
| Check results: what the check found, how serious it is, and the evidence. A key or password is masked: we keep only its first and last few characters. | When a check ends | To show you the results and prepare your report |
| Your email address | When you ask us to watch your app, order a report or send results by email | To send you what you asked for and to answer you |
| Request details: the report you chose, the page language, a count of findings by severity, and the date | With your request | To deliver the right report, in your language |
| Messages you send us | When you write to us | To answer you and keep a record of our conversation |
| Your IP address | On each check and form request | To stop abuse. It stays only in the server’s memory, to count requests in the past hour. We do not write it to disk. |
| Server logs: technical records such as app links, the addresses we send emails to, and errors | While the Service runs | To run the Service, fix errors and keep it secure |
When you pay for a report, our payment provider collects your payment details. We receive a confirmation of payment, not your card number.
3.Data we do not collect
- Your app’s code. A check reads the files your live app sends to every visitor, but we do not store them.
- Your customers’ data. A check counts records, and may read a single record to learn its field names (for example, “email”). We never keep the values.
- Passwords. We never ask for the password of your app or of any account.
- Your card number. Our payment provider handles it.
- Cookies and tracking data. Our website does not use them.
4.How we use personal data
- To provide the Service: run checks, show results, prepare and deliver reports, and watch your app when you ask us to.
- To communicate with you: confirmations, results, payment links, answers to your questions, and important notices about the Service.
- To keep the Service safe: limit requests, prevent abuse, and look into misuse, such as checks of apps without permission.
- To improve our checks: we study results to fix mistakes and add new checks. Where we can, we use data that does not identify you.
- To meet legal duties: for example, tax and accounting records, and answers to lawful requests from authorities.
We do not sell personal data. We do not use it for advertising. We do not make automated decisions about you that have legal or similarly significant effects.
Legal bases (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Provide the Service and deliver reports | Performance of a contract with you |
| Communicate with you about your requests | Performance of a contract, and our legitimate interest in serving you |
| Keep the Service safe and prevent abuse | Our legitimate interest in protecting the Service, its users and the apps it checks |
| Improve our checks | Our legitimate interest in a reliable Service |
| Tax, accounting and legal requests | Legal obligation |
| Marketing emails | Your consent |
5.Do you have to give us this data?
No law requires you to give us personal data. You give it by choice. But without an app link we cannot run a check, and without an email address we cannot send you results, a report or answers.
7.Storage and transfers outside Israel
We are based in Israel. Our servers are hosted by Amazon Web Services in the United States, so your data is stored and processed there. Our other service providers may process data in other countries.
By using the Service, you agree to this transfer. Where the law requires more, we rely on safeguards such as contracts that oblige the recipient to protect the data. For data from the EEA or UK, these are the European Commission’s standard contractual clauses or an equivalent.
8.How long we keep it
We keep personal data only as long as we need it for the purposes in this policy:
- Check results and app links: until you ask us to delete them, so you can return to your results and order a report later.
- Email addresses and requests: until you ask us to delete them, or until we no longer need them to serve you.
- Payment and accounting records: as long as tax and accounting law requires.
- IP addresses: not stored. They stay in memory only, and are erased when the server restarts.
We do not delete data on a fixed timer. When you ask us to delete your data, we delete it within 30 days, unless the law requires us to keep it.
9.How we protect it
- Our website is served only over encrypted connections (HTTPS).
- Each saved check has a long random identifier that is hard to guess.
- The page shows a serious finding only as a summary: what is wrong and how serious, not where. The full details stay on our servers.
- Keys and passwords that a check finds are masked before we store them.
- Only people who need personal data to run the Service can access it.
No system is completely secure. If a security incident affects your personal data, we will notify you and the authorities as the law requires.
10.Your rights
- Access: ask what data we hold about you, and get a copy (Section 13 of the Israeli Privacy Protection Law).
- Correction: ask us to correct data that is wrong, incomplete or out of date (Section 14).
- Deletion: ask us to delete your data.
- No more emails: ask us to stop emailing you, at any time.
- Withdraw consent: where we rely on your consent, you may withdraw it at any time. This does not affect what we did before.
If you are in the EEA or UK, you also have the right to restrict or object to processing, and to receive your data in a portable format.
To use a right, see Contact us. We may ask you to confirm that the request comes from you, for example from the email address in our records. Requests are free, and we answer within 30 days.
You may also complain to a data protection authority: in Israel, the Privacy Protection Authority; in the EEA or UK, the authority in your country. Please contact us first, so we can try to solve the problem.
12.Emails we send
We send the emails you ask for: confirmations, check results, reports, payment links, and notices about apps you asked us to watch. We may also send important notices about the Service or this policy.
We send marketing emails only with your consent. Each one says that it is an advertisement and includes a simple way to unsubscribe.
13.Data of people who use the checked apps
A check can reach data that belongs to the users of the app being checked. We do not keep it: we count records, read field names and keep no values. The deep checks use test accounts and test data that we create ourselves.
If you think a check involved your data, or an app you own was checked without your permission, see Contact us. We will look into it and delete the related data where appropriate.
14.Children
The Service is for app owners and businesses. It is not meant for anyone under 18, and we do not knowingly collect data from children. If you think a child gave us personal data, contact us and we will delete it.
15.Changes to this policy
We may update this policy when the Service or the law changes. We will change the “Last updated” date at the top. If a change is significant, we will also tell you on the website or by email before it takes effect.
16.Contact us
For questions, requests or complaints about privacy, contact LidTight.
We will publish our contact email here before launch. Until then, reply to any email we sent you.