Last updated · October 2026

Privacy Policy

The short version: ConfGoOne runs entirely on your machine. There's almost nothing to have a privacy policy about — but here's the exact, complete list of what does leave your computer, and when.

What we collect, and why

Your configuration files never leave your machine. These are the only situations in which the app or this website sends anything:

• Downloading the app. The download form asks for your name and email. We use them to send a welcome email and occasional product-update emails — for example when a new version is released. Every update email has a one-click unsubscribe link, and unsubscribing takes effect immediately. We never sell or share your address.
• Buying a license. When you purchase Pro or Enterprise, our payment processor (Razorpay) and email provider (Resend) receive your email address, your Machine ID (a short code derived from your computer's hardware, not personally identifying on its own), and payment details handled entirely by Razorpay — we never see or store your card details. This is used solely to generate and deliver your license key, and is kept as our sales record.
• Using the optional AI feature. If you turn on AI-assisted analysis and configure your own API key for a provider (OpenAI, Anthropic, Gemini, OpenRouter, NVIDIA NIM, or a self-hosted endpoint), the relevant configuration content is sent directly from your machine to that provider, under whatever privacy terms they publish. This is entirely optional, off by default, and never proxied through us — we don't see this data either. Using a local model through Ollama sends nothing anywhere.
• Known-vulnerability lookups. To list known CVEs for a device, the app sends the product name and software version (for example "Cisco IOS 15.2") to the US National Vulnerability Database (NVD), downloads CISA's public list of actively exploited vulnerabilities, and sends CVE numbers to FIRST.org for exploit-likelihood (EPSS) scores. No configuration content, file names or personal data are sent, and none of it goes through us. You can turn this off in Settings → General → Network to keep audits fully offline.
• Visiting this website. We use Cloudflare Web Analytics to count page views and see which pages are popular. It uses no cookies, does not track you across sites, and does not identify individual visitors.
• Update checks. The app checks confgoone.com for a newer version, and paid licences check our server for new compliance checks (sending the licence key so we can confirm the licence is valid). Nothing about your audits is sent.

What we never see

• The actual contents of any configuration file, device connection, screen capture, or scan you run — this is processed and stored locally on your machine only
• Your findings, reports, scan history, or suppressed-findings list
• Your card or bank details — Razorpay handles payment entirely; we only receive confirmation that a payment succeeded

How long we keep it

Your download email stays on the update list until you unsubscribe or ask us to delete it; after unsubscribing we keep only a "do not email" note so you aren't added back by mistake.

The sale record (your email, Machine ID, and which license you bought) is kept indefinitely for support and license-reissue purposes — for example, if you get a new computer and need your key reissued. You can ask us to delete this record at any time by emailing us; note that doing so may mean we can no longer verify or reissue your license.

Third parties involved

• Razorpay — payment processing. See Razorpay's privacy policy.
• Resend — delivers the email containing your license key. See Resend's privacy policy.
• GitHub — hosts the app download. No account or login is required.
• Cloudflare — privacy-friendly website visit counts (no cookies). See Cloudflare's privacy policy.
• NIST NVD, CISA and FIRST.org — public vulnerability databases queried for known-CVE lookups (product name, version and CVE numbers only). Optional; can be turned off in the app.

Your rights

Since we hold almost no data about you beyond your email and, if you bought a license, a sale record, there's little to request — but you can ask us at any time to see, correct, or delete what we have. Contact us at support@confgoone.com.

Changes to this policy

If this ever changes — for example, if we add a feature that sends more data somewhere — we'll update this page and change the "Last updated" date above.

Contact

Questions about this policy: support@confgoone.com.