> ## Documentation Index > Fetch the complete documentation index at: https://docs.enforster.ai/llms.txt > Use this file to discover all available pages before exploring further. # Privacy Policy > How we protect and handle your data with transparency ## 🎯 Scope This Privacy Policy applies to: * Enforster AI website and services * API services * Customer support interactions * Marketing communications *** ## 📊 Information We Collect ### Information You Provide * **Account Information**: Name, email, company, job title * **Payment Information**: Billing details, payment method (processed securely) * **Project Data**: Repository information, code snippets * **Communication**: Support tickets, feedback, feature requests * **Profile Information**: Preferences, settings, usage patterns ### Automatically Collected Information * **Usage Data**: Feature usage, scan frequency, platform interactions * **Technical Data**: IP address, browser type, device information * **Performance Data**: Response times, error logs, system metrics * **Security Data**: Login attempts, access patterns, threat indicators ### Third-Party Sources * **Authentication Providers**: GitHub, GitLab, Google, Microsoft, AWS, AZURE, GCP * **Analytics Services**: Usage analytics and performance monitoring * **Security Services**: Threat intelligence and security monitoring * **Business Partners**: Referral and partnership information *** ## 🔐 How We Use Your Information ### Service Provision * **Account Management**: User authentication and access control * **Security Scanning**: AI-powered vulnerability detection and analysis * **Feature Delivery**: Platform functionality and customization * **Support Services**: Customer assistance and technical support * **Communication**: Service updates and important notifications ### Platform Improvement * **Performance Optimization**: System efficiency and reliability * **Feature Development**: Product enhancement and new capabilities * **Security Enhancement**: Threat detection and prevention * **User Experience**: Interface improvements and usability * **Analytics**: Usage patterns and service optimization ### Business Operations * **Billing and Payments**: Subscription management and invoicing * **Customer Success**: Account management and relationship building * **Marketing**: Product updates and relevant communications * **Compliance**: Legal and regulatory requirements * **Security**: Fraud prevention and threat detection *** ## 🚫 Information We Don't Collect ### Excluded Data Types * **Source Code**: We do not store your complete source code * **Credentials**: Passwords, API keys, or authentication tokens * **Personal Files**: Documents, images, or personal content * **Sensitive Business Data**: Trade secrets or confidential information * **User Communications**: Private messages or personal emails ### Data Minimization * **Purpose Limitation**: Collect only necessary information * **Retention Limits**: Store data only as long as required * **Access Controls**: Limit access to essential personnel * **Encryption**: Protect all sensitive data with encryption * **Anonymization**: Remove identifying information when possible *** ## 🔒 Data Security ### Security Measures * **Encryption**: AES-256 encryption for data at rest and in transit * **Access Controls**: Role-based access and multi-factor authentication * **Network Security**: Firewalls, intrusion detection, and DDoS protection * **Physical Security**: Secure data centers with 24/7 monitoring * **Employee Training**: Regular security awareness and training ### Data Protection * **Vulnerability Scanning**: Regular security assessments * **Penetration Testing**: Third-party security testing * **Incident Response**: 24/7 security monitoring and response * **Backup Security**: Encrypted backups with disaster recovery * **Compliance Monitoring**: Regular compliance verification *** ## 🌍 Data Location and Transfer ### Data Storage * **Primary Location**: United States (AWS US East) * **Backup Locations**: Multiple geographic regions for redundancy * **Data Residency**: Options available for specific regions * **Transfer Protocols**: Secure data transfer with encryption * **Local Laws**: Compliance with applicable data protection laws ### International Transfers * **Adequacy Decisions**: EU-US Privacy Shield compliance * **Standard Contractual Clauses**: GDPR-compliant data transfer * **Binding Corporate Rules**: Internal data protection standards * **Local Representatives**: EU and UK data protection representatives * **Cross-Border Compliance**: International data transfer safeguards *** ## 📋 Data Retention ### Retention Periods * **Account Data**: Retained while account is active * **Usage Data**: Retained for 24 months for service improvement * **Security Data**: Retained for 7 years for compliance * **Communication Data**: Retained for 3 years for support * **Analytics Data**: Retained for 12 months for optimization ### Data Deletion * **Account Deletion**: Complete data removal within 30 days * **Data Export**: Customer data export before deletion * **Backup Cleanup**: Secure deletion from all backup systems * **Third-Party Removal**: Removal from integrated services * **Verification**: Confirmation of complete data removal *** ## 👥 Data Sharing ### Service Providers * **Cloud Infrastructure**: AWS, Google Cloud, Azure * **Security Services**: Threat intelligence and monitoring * **Analytics Services**: Usage analytics and performance monitoring * **Support Tools**: Customer support and communication platforms * **Payment Processors**: Secure payment processing services ### Legal Requirements * **Law Enforcement**: When required by law or court order * **Regulatory Compliance**: Government and industry regulations * **Legal Proceedings**: Legal defense and dispute resolution * **Public Safety**: Emergency situations and threat prevention * **Fraud Prevention**: Security and fraud detection ### Business Transfers * **Merger or Acquisition**: Business combination or sale * **Asset Sale**: Sale of business assets or divisions * **Bankruptcy**: Insolvency or financial restructuring * **Successor Entity**: Continuation of business operations * **Customer Notification**: Advance notice of business changes *** ## 🎯 Your Rights and Choices ### Data Access * **View Your Data**: Access to your personal information * **Data Portability**: Export your data in standard formats * **Correction**: Update or correct inaccurate information * **Deletion**: Request deletion of your personal data * **Restriction**: Limit how we use your information ### Communication Preferences * **Marketing Emails**: Opt-out of promotional communications * **Service Updates**: Essential service notifications * **Security Alerts**: Important security and privacy updates * **Newsletter**: Product updates and industry insights * **Frequency Control**: Control communication frequency ### Account Settings * **Privacy Controls**: Manage your privacy preferences * **Data Sharing**: Control third-party data sharing * **Analytics Opt-out**: Disable usage analytics collection * **Cookie Preferences**: Manage cookie and tracking settings * **Notification Settings**: Customize notification preferences *** ## 🍪 Cookies and Tracking ### Cookie Types * **Essential Cookies**: Required for platform functionality * **Performance Cookies**: Analytics and performance monitoring * **Functional Cookies**: User preferences and customization * **Marketing Cookies**: Advertising and marketing optimization * **Third-Party Cookies**: Integrated service functionality ### Tracking Technologies * **Web Beacons**: Email tracking and engagement metrics * **Local Storage**: Browser-based data storage * **Session Storage**: Temporary session information * **Device Fingerprinting**: Device identification and security * **Analytics Tools**: Usage analysis and optimization *** ## 🧒 Children's Privacy ### Age Restrictions * **Minimum Age**: 18 years or older for account creation * **Parental Consent**: Required for users under 18 * **Educational Use**: Special provisions for educational institutions * **Verification**: Age verification for account creation * **Protection**: Enhanced protection for minor users *** ## 🔄 Policy Updates ### Update Process * **Regular Review**: Annual policy review and updates * **Customer Notification**: Advance notice of significant changes * **Version History**: Complete change tracking and documentation * **Effective Date**: Clear effective dates for all changes * **Acceptance**: Continued use constitutes acceptance of changes ### Communication Methods * **Email Notification**: Direct email to registered users * **Platform Notice**: In-app notifications and alerts * **Website Updates**: Updated policy posted on website * **Social Media**: Announcements on official channels * **Customer Support**: Direct communication for significant changes *** ## 📞 Contact Information ### Privacy Team * **Privacy Officer**: [privacy@enforster.ai](mailto:privacy@enforster.ai) * **Legal Team**: [legal@enforster.ai](mailto:legal@enforster.ai) * **Customer Support**: [support@enforster.ai](mailto:support@enforster.ai) *** ## 🚨 Privacy Complaints ### Response Timeline * **Initial Response**: Within 48 hours of receipt * **Investigation**: Complete investigation within 30 days * **Resolution**: Resolution and communication within 60 days * **Follow-up**: Follow-up to ensure satisfaction * **Documentation**: Complete complaint documentation *** *This Privacy Policy is part of our commitment to transparency and data protection. We encourage you to review this policy regularly and contact us with any questions or concerns.* **For questions about this Privacy Policy, please contact us at [privacy@enforster.ai](mailto:privacy@enforster.ai)**