Information we collect
Request details may include company name, contact email, target domain or host, authorization confirmation, optional context, generated findings, delivery audit events, and limited request logs used for abuse prevention.
How information is used
Information is used to validate scope, run an outside-in review, prepare human-reviewed deliverables, publish secure brief links, support downloads, and troubleshoot the workflow.
What not to submit
Do not submit passwords, API keys, private keys, payment card details, government IDs, or other sensitive secrets in request notes.
Sharing and retention
Client information is not sold. Pilot retention defaults are documented internally as 90 days for jobs and artifacts, 30 days for request logs, and 180 days for audit events unless a client agreement requires a different period.