Privacy Policy

1. Who We Are

SlopCop is a software-development service operated by Brokk, Inc., a Texas corporation.

Brokk, Inc.
508 Kodiak Trail
Cedar Park, TX 78613
United States
support@slopcop.com

This Privacy Policy explains how we collect, use, retain, and share information when you visit our website, register for an account, connect repositories, use SlopCop features, or purchase credits or subscriptions.

This Policy applies to eligible free users internationally and paying customers in the United States.

2. Information We Collect

Depending on your use of SlopCop, we may collect or process:

• Name, email address, and account identifiers.
• Authentication, session, and security information.
• Organization, team, and workspace information.
• Repository identifiers and integration permissions.
• Device information, usage events, and security logs.
• Customer support communications.
• Payment and billing information.
• Subscription and plan information, where applicable.
• Source-code patches and repository-derived information.
• Findings, reports, file paths, source-code excerpts, and related events.
• Cookie preferences, analytics information, and browser-storage data.

Submitted patches may include uncommitted or unpushed source code.

Customers should avoid submitting secrets, credentials, or sensitive information unless necessary and authorized.

3. Payment and Subscription Information

We use Stripe to process payments and administer billing.

Depending on the billing arrangement, payment-related information may include:

• Billing name, email address, and billing country.
• Credit purchases and transaction amounts.
• Subscription plan, billing period, and renewal date.
• Subscription activation, cancellation, and renewal history.
• Included credits, usage allowances, and plan entitlements.
• Automatic top-up settings and transactions.
• Usage-based charges and authorized overages.
• Payment status, refunds, disputes, and invoices.
• Payment-method brand, expiration date, and last four digits.
• Stripe customer, payment, and transaction identifiers.

Stripe processes complete payment-card credentials and may retain them for authorized future payments.

Brokk does not store complete payment-card numbers.

Stripe may independently process information under its own applicable privacy notices.

4. How We Use Information

We use collected information to:

• Create and authenticate accounts.
• Operate repository integrations, checks, and scans.
• Generate findings, reports, and related outputs.
• Administer workspaces and access permissions.
• Calculate credits, allowances, and usage charges.
• Process purchases, subscription renewals, and cancellations.
• Manage automatic top-ups and authorized overage billing.
• Provide customer support.
• Prevent fraud, abuse, and security threats.
• Diagnose technical problems and improve reliability.
• Analyze product usage and improve the Services.
• Meet accounting, tax, and legal obligations.
• Communicate important service and billing information.

Marketing communications, where used, are subject to applicable consent and opt-out requirements.

5. Source Code and AI Processing

SlopCop provides software checks designed to identify software-development problems and enforce engineering rules. They are deterministic, with one exception described below.

The slopcop check command can upload a patch containing customer source code, including uncommitted or unpushed changes.

The exception is the similar-function check. It sends the source code of each function your change adds or edits, and of the existing functions in the repository they resemble, to Voyage AI (to compute embeddings), turbopuffer (to search them) and Typesafe (a model that judges whether two functions should be combined), so it applies to unpushed changes too. It sends no other part of the patch.

To make that comparison, SlopCop also stores embeddings and locations (file, name and line range, not source code) of the functions in a repository's commits with turbopuffer. They are deleted when no workspace holds the repository any more.

SlopCop may retain findings, reports, file paths, source-code excerpts, and other information generated by repository scans and checks.

SlopCop also has separate AI-assisted analysis functionality, which is currently disabled.

If AI-assisted analysis is enabled in the future, relevant source-code excerpts may be transmitted to external AI service providers to perform the requested analysis. We will update applicable disclosures as necessary before enabling functionality that materially changes how customer information is processed.

Apart from the similar-function check, deterministic checking and AI-assisted analysis are distinct processes.

6. Cookies, Analytics, and Browser Storage

SlopCop uses cookies and similar browser technologies to support website functionality, maintain sessions, remember preferences, protect accounts, and understand how visitors use our Services.

These technologies may include browser cookies, local storage, and similar mechanisms.

6.1 Essential Technologies

Certain cookies and browser-storage mechanisms are necessary for authentication, security, session management, and core website functionality.

These technologies may operate without optional analytics consent where permitted by applicable law.

6.2 Analytics

SlopCop uses PostHog to analyze website and product usage, understand user interactions, identify technical problems, and improve the Services.

Analytics information may include page visits, interactions, browser and device information, usage events, and related technical information.

Where enabled, Google Analytics or other Google measurement technologies may also process website usage information.

Optional analytics technologies are subject to applicable consent requirements and the preferences made available through our website.

6.3 Cookie Consent and Preferences

SlopCop provides cookie-preference controls through its website.

Where required by applicable law, optional analytics technologies will be activated only after the necessary consent has been obtained.

Users may manage their available preferences through the website's cookie controls.

Browser settings may also permit users to block or delete cookies, although disabling certain technologies can affect website functionality.

6.4 Global Privacy Control

Global Privacy Control (GPC) is a browser-based privacy preference signal.

Where applicable law requires recognition of GPC or similar legally recognized opt-out signals, SlopCop will process those signals in accordance with the relevant requirements.

The effect of a GPC signal depends on applicable law and the processing activities involved.

6.5 Third-Party Technologies

Third-party service providers may use cookies or similar technologies when providing payment, authentication, analytics, or other services.

Their processing practices may also be governed by their respective privacy policies.

7. Data Retention

We retain information for periods appropriate to its purpose, subject to applicable legal and operational requirements.

Our retention practices include:

• CLI patches: Patches uploaded through slopcop check are deleted within approximately two hours after the check begins, following processing.
• Check results and findings: Generated findings and related information may remain after the original patch is deleted.
• Repository scans and reports: Scans, findings, reports, source-code excerpts, and related events may be retained while the associated workspace exists.
• Authentication and session information: Retained according to applicable expiration and security requirements.
• Email and Slack delivery history: the record of each email and Slack notification we send, including its delivery status, is deleted automatically 90 days after delivery completes or fails.
• PostHog analytics: Retained for one year.
• Production database backups: Retained for 35 days.
• Billing and subscription records: Retained as necessary for accounting, tax compliance, fraud prevention, dispute resolution, and legal obligations.

Deletion of active account or workspace information does not necessarily result in immediate deletion from backups or legally required records.

8. Service Providers and Data Sharing

We may share information with third-party providers as necessary to operate, secure, analyze, and support SlopCop.

These providers may include:

• Stripe for payment processing, subscription billing, and transaction administration.
• PostHog for product analytics.
• Google, where applicable, for website measurement and analytics.
• Infrastructure and database hosting providers.
• Repository hosting and integration providers.
• Email and communication providers.
• Voyage AI, turbopuffer and Typesafe for the similar-function check.
• AI service providers if AI-assisted functionality is enabled.

We do not transfer ownership of Customer Content to these providers.

Information shared depends on the services performed and applicable contractual arrangements.

We may also disclose information where required by law, to protect the security of our Services, or in connection with a merger, acquisition, financing, restructuring, or sale of relevant business assets, subject to applicable law.

9. International Users and Data Transfers

Brokk operates from the United States.

Eligible users outside the United States may access free SlopCop features, subject to applicable restrictions.

Personal information may be processed in the United States or other countries where our service providers operate.

Where applicable privacy laws require safeguards for international transfers, we will implement legally required arrangements.

Depending on the processing activity and applicable law, our legal bases for processing personal information may include:

• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests, where permitted.
• Consent, where required or appropriate.

10. Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Access personal information.
• Correct inaccurate information.
• Request deletion of eligible information.
• Restrict or object to certain processing.
• Request portability of eligible information.
• Withdraw consent where processing relies on consent.
• Opt out of certain uses or disclosures of personal information where applicable.
• Exercise other rights provided by applicable privacy laws.

Requests may be submitted to support@slopcop.com.

We may need to verify your identity before fulfilling a request.

We will respond in accordance with applicable law.

Certain information may be retained where required or permitted by law.

11. Account Deletion and Data Erasure

Customers may request account deletion or eligible personal-information erasure through support@slopcop.com.

Account erasure may remove identifying account information and personal-workspace data.

Information belonging to shared team workspaces may remain accessible to other authorized members.

Certain billing, subscription, accounting, security, and audit records may be retained where legally required or otherwise permitted.

Some analytics deletion procedures may require manual processing.

Production database backups are retained for 35 days. Information deleted from active systems may therefore remain in backup copies until those backups expire.

Restoration from a backup may require previously completed erasure requests to be reapplied.

12. Security

We use administrative and technical safeguards designed to protect information processed through the Services.

These measures are intended to reduce risks involving unauthorized access, disclosure, alteration, and loss.

However, no internet-based service or information system can guarantee absolute security.

Customers are responsible for managing their own credentials, repository permissions, and authorized users.

13. Children's Privacy

SlopCop is intended for adult software developers and organizations.

The Services are not directed to children under 18.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our Services, billing arrangements, data-processing practices, or legal obligations.

Updates will be identified by a revised effective date.

Where required by law, we will provide additional notice or obtain consent.

15. Contact

For privacy questions, access requests, corrections, deletion requests, or concerns about our data practices:

support@slopcop.com

Brokk, Inc.
508 Kodiak Trail
Cedar Park, TX 78613
United States