Privacy policy

1. Information We Collect

We collect information you provide directly: name, email, and cloud account credentials (encrypted with AES-256). We also collect usage data such as pages visited, features used, and scan results metadata.

2. How We Use Your Information

We use your information to provide and improve Zaysa services, send you reports and notifications you've opted into, and communicate about your account.

3. Data Security

Secrets and tokens we hold are encrypted at rest using AES-256-GCM. Zaysa connects to your cloud accounts with short-lived federated identity where the provider supports it. Actions that change your infrastructure run only with the permissions you grant and are recorded in an audit trail. We keep scan results and resource metadata for the retention period below.

4. Data Retention

Scan results are retained for 90 days. Account data is retained while your account is active and deleted within 30 days of account closure.

5. Contact

For privacy-related inquiries, contact us at hello@zaysa.io.