Privacy Policy
Draft — pending legal review.
What we collect
Account information (name, email), the code and artifacts you submit for scanning, scan results, and standard operational logs. Login uses email one-time codes; we store password hashes, never plaintext passwords.
How we use it
To run scans, generate findings and reports, evaluate compliance controls, notify you about results, and keep the platform secure. AI-assisted triage processes finding context to produce explanations; submissions are not used to train models.
Where it lives
Data is stored with established cloud providers, encrypted in transit and at rest. Repository access tokens and webhook secrets are additionally encrypted at the application layer.
Your choices
You can delete scans, revoke repository connections and API keys, and request account deletion at any time. Write to moreinfo@pisteyo.com for data requests.