Privacy Policy

Who we are

VendorGuard is operated by Remiaft LLC, a limited liability company registered in Delaware, United States ("Remiaft", "we", "us"). This policy explains what information we collect when you use vendorguard.remiaft.llc, its API and related services (the "Service"), and how we use it.

Information we collect

We collect only what we need to run the Service:

• Account information: your email address, optional username and a salted hash of your password. We never store your password in plain text.
• Files and addresses you submit: APK files you upload, the URLs and domains you check, and the results we produce, including package names, file hashes, signing certificates and vendor verdicts.
• Billing information: your balance, membership, orders and transactions. Card payments are handled by Stripe; we never receive or store your full card number.
• Technical information: IP address, browser and device details, request logs, and the referring page or campaign that brought you to the Service.
• Support messages: what you send us when you contact us through Telegram.

How we use information

• To provide scans and reports, keep your history and let you share report links.
• To manage your account, daily quotas, API keys, balance, subscriptions and payments.
• To prevent abuse, fraud and automated attacks, including through human verification checks.
• To answer support requests and to tell you about important changes to the Service.
• To understand how the Service is used and to measure the effectiveness of our advertising.
• To meet legal, tax and accounting obligations.

Service providers and sharing

We do not sell your personal information. We share information only with providers that help us run the Service:

• Cloudflare hosts the Service, stores data and uploaded files, and provides the Turnstile human verification check and transactional email.
• Stripe processes card payments and subscriptions under its own privacy policy.
• Security vendors: to produce a verdict we send file fingerprints, package identifiers and the URLs you check to third-party security services, including services operated by OPPO (HeyTap). These services may be located outside your country, including in mainland China.
• Google provides advertising and conversion measurement tags (Google Ads and AdSense) and, where enabled, translation of vendor descriptions.
• Telegram carries support conversations you start with us.

Reports you share are visible to anyone who has the link. We may also disclose information when required by law, to protect our rights or users, or as part of a merger or acquisition.

Cookies

We use cookies that keep you signed in, remember your language and site preference, count free daily scans for visitors who are not signed in, and record which campaign brought you to us. Google's advertising tags may set their own cookies. You can block or delete cookies in your browser, but signing in and some features will then stop working.

Retention

Uploaded APK files are deleted automatically within 90 days, and incomplete uploads within one day. Scan results and report links are kept so that reports keep working. Account and billing records are kept while your account is open and afterwards for as long as required for legal, tax and accounting purposes.

Security

We protect information with encryption in transit, hashed passwords, access controls and signed payment callbacks. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You can update your account details and API keys at any time. Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to certain processing. To make a request, contact us as described below; we may need to verify your identity first.

International transfers

We and our providers process information in the United States and other countries. By using the Service you understand that your information may be transferred to and processed in countries with different data protection laws than your own.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If the changes are significant, we will let you know on the Service or by email.

Contact us

Questions about this policy or your information: contact Remiaft LLC on Telegram at @vendorguard_bot.