What we collect
Account details you give us: name, email address, and sign-in settings (stored by Amazon Cognito; if you sign in with Google, Google confirms your email address to us). Billing details are handled by Stripe; we never see or store full card numbers.
Data from cloud accounts you connect: configuration and billing metadata read through the read-only role, managed identity or keys you provide, and the findings we produce from it.
Messages you send us through the contact form or support chat, and basic technical logs needed to run and secure the service.
How we use it
To provide the service, run scans, send notifications you ask for, process payments, respond to you, and keep the service secure. We send marketing email only if you opt in, and you can opt out at any time under Account security or by using the unsubscribe link.
Who can see it
Our staff cannot see your connected accounts, scans, findings, or reports unless you buy professional services or a TAM plan and allow access. We share data only with the providers that run the service for us (Amazon Web Services for hosting, email, and sign-in; Stripe for payments), or when the law requires it. We do not sell personal information.
Security
Data is encrypted in transit and at rest. Secrets such as access keys are stored in AWS Systems Manager Parameter Store as encrypted values. Staff accounts require two-step verification.
Retention and deletion
We keep your data while your account is active. You can delete a single scan, or a connected account with its whole scan history, in the app at any time; a scan is deleted with its findings, check runs and notifications. Our operational logs contain no findings and expire after 30 days. To delete your whole account, email us and we will delete it within 30 days, except records we must keep for tax or legal reasons.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information. Email us to make a request.
Changes
We will post changes to this policy here and update the date above. Material changes will also be announced by email or in the app.
Questions? Email contact@parlak.us.