Privacy policy

The public site keeps no analytics and no visitor profiles. If you use the contact form, we use your name, email and message only to reply.

The registry stores your organization’s canonical packages, workspaces, members, audit log and drift reports. Telemetry events carry operational metadata only; fields that could hold prompts, code, file contents, paths, credentials, usernames or emails are rejected by the event schema.

AI analysis runs only when your organization opts in. It sends the package assets being analyzed to the configured AI provider, whose own terms apply to what it receives.

To ask for a copy or deletion of your data, use the contact form and choose “Privacy request”.