Privacy policy
Effective October 3, 2026. Redlark is operated by Nicholas Van Landschoot. Redlark contact: [email protected].
Website and payments
Cloudflare hosts and protects this website and processes request information such as IP address, browser information and security logs. Cloudflare also provides website performance analytics on this deployment. See Cloudflare’s privacy policy.
Stripe hosts checkout and subscription billing. Payment-card details are entered directly into Stripe, not our onboarding form. We use customer contact details, selected scope, subscription identifiers and payment status to administer your service. See Stripe’s privacy policy.
Onboarding and audit materials
The onboarding form creates a text download locally in your browser. It does not submit the form or save it in browser storage. If you email that intake to [email protected], we use the business details, asset URLs and contacts to confirm scope and authorization. Business email is handled through Google Workspace. Do not include credentials, source code or customer personal data in that email.
Repository access, test accounts and reports are arranged privately using restricted access agreed with you. We collect only materials needed for the review. Private code and sensitive evidence are not submitted to external AI or scanner services without your prior agreement about the provider and use. We do not sell audit materials, use them for advertising, or authorize their use to train general-purpose AI models.
Retention and security
We restrict access to audit materials to those needed to deliver the service. At offboarding, revoke repository invitations and test credentials. Working copies and technical evidence are deleted within 30 days after service ends, or earlier on request unless another period is agreed. Billing, authorization and necessary correspondence are retained only as needed for service, disputes and legal obligations. Providers may retain their own records and backups under their policies and process information in other countries.
Your requests
Email [email protected] to request access, correction or deletion, or ask about a processor. We verify your authority before disclosing sensitive audit information and explain any required retention. Applicable privacy rights remain available. Material policy changes are communicated to active customers.