Privacy

Placeholder for the operator's privacy notice. What the software itself stores today: account email and name, session metadata (IP address and user agent), audit events, test evidence captured from targets you verified (screenshots, traces, logs), and encrypted test credentials.

Evidence objects carry a 90-day retention date. Page text from targets may be sent to the AI providers your organization allows; screenshots and source code are not sent unless your organization enables it.