Subprocessors

During the beta, Scandar sends personal data only to the services below. There is no payment provider.

Host

The application and its database are hosted by BIDON_ELOUAN. The host stores the account, the manifests, the lockfiles, and the logs.

GitHub

When you connect GitHub, repository contents are read so Scandar can scan them and open a fix pull request. GitHub, Inc.

Resend

Account emails (sign-in, invitations, password reset) are sent by Resend when email is configured that way. Plus Five Five, Inc.

OpenRouter

A plain-language explanation of a public advisory is sent to OpenRouter, Inc. The prompt is the advisory text, the package name, the ecosystem, and the version. It does not include the repository name or source code. OpenRouter then sends that prompt to the model configured on this server.

Sentry

When error reporting is configured, a stack trace and the page address are sent to Functional Software, Inc. (Sentry) so a crash can be fixed. It is not used to look at your repositories.