Privacy

This is a product draft, not a lawyer-reviewed policy. Have it reviewed before you take a customer's production account.

We store your email, name, plan, the AWS role ARN, the external ID, resource identifiers, metric summaries, and estimated costs. We do not store access keys from your account, and the role cannot read object or database contents.

Disconnecting an account starts a 30-day clock. After that the weekly job deletes the account row and the scans that belong to it.

Waitlist emails stay until you ask us to remove them. Stripe handles card data. Resend handles outbound email. The optional LLM sees the report text, which contains resource IDs and dollar estimates, not your application data.

Back home