Legal
Privacy Notice
This notice explains how LIMA NETWORKS LTD handles personal data when you use the GitHub Actions Security Auditor.
Controller
LIMA NETWORKS LTD, Company No. 03475103, registered in England and Wales, is the controller for personal data processed through this service.
Registered office: 6 Digital Park, Pacific Way, Salford, Manchester, M50 1DR.
Data we collect
- GitHub account and profile data required to authenticate you.
- Repository, workflow, and action reference data submitted for scanning.
- Security findings, scan metadata, and exported report content.
- Technical usage data such as IP address, browser details, and service logs.
Why we process it
- To authenticate access to public and private repositories.
- To provide workflow scanning, findings, reporting, and AI-assisted analysis.
- To secure, operate, support, and improve the service.
- To investigate misuse, abuse, or service failures.
Lawful bases
- Performance of a contract where the service is provided to a customer.
- Legitimate interests in operating, securing, and improving the service.
- Compliance with legal obligations where applicable.
Processors and sharing
We may use service providers to host or support this service, including infrastructure and API providers such as:
- Cloudflare for hosting and application delivery.
- GitHub for repository authentication and repository content access.
- OpenRouter for optional AI-generated analysis where that feature is used.
International transfers
Some providers may process data outside the UK. Where that happens, we expect appropriate safeguards to be used.
Retention
We retain data only for as long as needed to provide the service, maintain security, meet legal obligations, and resolve disputes. Retention periods may vary depending on the type of data and support requirements.
Your rights
Depending on the circumstances, you may have rights to access, rectify, erase, restrict, object to processing, or request portability of your personal data.
Complaints
If you have concerns about how your personal data is handled, you may contact us first. You also have the right to complain to the Information Commissioner's Office.
Contact
For privacy enquiries, publish your preferred contact email here before going live.