Legal

Privacy Policy

Last updated: January 2025

1. Information We Collect

We collect information you provide directly: name, email, and cloud account credentials (encrypted with AES-256). We also collect usage data such as pages visited, features used, and scan results metadata.

2. How We Use Your Information

We use your information to provide and improve InfraHQ services, send you reports and notifications you've opted into, and communicate about your account.

3. Data Security

All cloud credentials are encrypted at rest using AES-256 encryption. We use read-only access to your cloud accounts and never store your cloud resource data permanently.

4. Data Retention

Scan results are retained for 90 days. Account data is retained while your account is active and deleted within 30 days of account closure.

5. Contact

For privacy-related inquiries, contact us at support@infrahq.com.