Privacy Policy for ThreatScope

Last Updated: 2024-11-12

ThreatScope respects your privacy and is committed to protecting the information you share with us. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our introduction management software. By using ThreatScope, you consent to the practices outlined in this Privacy Policy.
 

1. Information We Collect

To provide our services, we collect certain information from you when you connect your Cloud Infrastructure and Code to ThreatScope. This includes:

• Repository Access: We download your repository, and perform scans on it. Afterwards, it is deleted. We do not keep your code.

• Authentication and Authorization for Cloud Infrastructure: We use Cloud IAM construts to allow authorization, and authentication of your cloud infrastructure.

• Security Findings: Any Security Findings from our Scanner, including ips from public endpoints, and potential security vulnerabilities.
   

2. How We Use Your Information

The information we collect is used solely to deliver the ThreatScope service effectively and in line with user expectations. Specifically, we use your data to:

• Display to the user their security findings.

• Map findings to Compliance Frameworks.

Note: We do not release your information to third parties for advertising, marketing, or other unrelated purposes.
 

3. Data Sharing and Disclosure

Third-Party Services: We do not sell, lease, or share your information with third parties for marketing or advertising purposes. Your data is used only for displaying security findings as part of the ThreatScope service.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
 

4. Data Security and Retention

We prioritize the security of your data and apply industry-standard practices to protect it. We retain your data only as long as necessary to fulfill the purposes outlined in this policy or as required by law.