Privacy

What we collect

• Your email, if you join the waitlist or create an account.
• If you have an account: when you signed in or out and when your subscription changed, so we can answer questions about your account.
• For web scans, how many times each rule fired. Nothing that identifies your account.
• If you connect a Cloudflare account: its read-only token, encrypted; each resource's usage and cost per day, with its name; and the latest scan's findings, which can include the text of a slow D1 query with its values replaced by "?". Usage is kept 30 days, and all of it is deleted when you disconnect or your subscription ends. Cloudflare's database backups can hold deleted data for up to 30 more days before it's gone for good.
• The budgets you set, and a record of each alert we sent you, kept 30 days and deleted with the connection. If you use brakes: your Brake Worker's address, the secret Guard signs its requests with (encrypted), and each pause and resume, kept 30 days.
• Your Stripe customer ID, if you pay. We never see your card number.

What we don't collect

API tokens are used for one request and discarded. The command-line scanner sends us nothing at all.

The dashboard sets one cookie, which keeps you signed in for 30 days. There are no tracking or advertising cookies.

Who else handles data

• Cloudflare hosts this site and its database, and runs the bot check on our forms.
• Stripe processes payments.
• Mailgun sends sign-in links, budget alerts and the daily email. Alerts and the daily email name the resources they're about and what they cost, so those names pass through Mailgun.

Your choices

Email support@knsept.com to see or delete what we hold about you.