Privacy Policy

1. Information We Collect

When you create an account we collect your email address, company name, team size, and role. When you connect your infrastructure, alert metadata (service names, alert names, timestamps) and anonymised infrastructure context (pod names, log snippets, deployment history) is processed to generate root cause analyses.

We do not collect passwords in plain text. Passwords are hashed with bcrypt. Sensitive credentials (Slack tokens, SMTP passwords) are encrypted at rest using AES-256-GCM.

2. How We Use Your Information

• To provide the RCA pipeline service you signed up for.
• To send transactional emails (email verification, incident summaries if configured).
• To enforce usage limits and prevent abuse.
• To improve the service based on aggregated, anonymised usage patterns.

3. Data Sharing

We do not sell your data. Infrastructure context data is sent to Anthropic's Claude API to generate root cause analyses. Anthropic's privacy policy applies to that processing. No other third parties receive your data except as required by law.

4. Data Retention

Incident records and RCA text are retained for the duration of your subscription plus 90 days. You may request deletion at any time by emailing privacy@infranexis.com.

5. Security

We use TLS for all data in transit, AES-256-GCM encryption for stored credentials, and bcrypt for password hashing. Access to production systems is restricted to authorised personnel.

6. Contact

For privacy questions or data deletion requests, contact us at privacy@infranexis.com.