Privacy

What we collect

Account information you provide (such as email) when you sign up. Scan metadata and findings generated when you connect an AWS account and run a scan.

AWS credentials

We do not store your AWS access keys or secret keys. Scans use a temporary session via IAM AssumeRole against a role you deploy. When the session ends, that credential is gone.

What a scan reads

Configuration and metadata needed for cost and security findings (for example instance types, security group rules, bucket public-access settings). We do not read the contents of your S3 objects, databases, or application data.

How findings are stored

Findings are stored in your Rectifyr workspace so you can review them later. You can delete findings or your account. Revoking the IAM role in AWS immediately stops further access.

Cookies and auth

We use session cookies required to keep you signed in. We do not sell personal data.

Contact

Questions about privacy: use the contact page.