Privacy Policy

At Precogs AI ("we," "our," or "us"), we are committed to protecting the privacy and security of our customers. Because Precogs AI analyzes Source Code and Binaries, we have designed this policy to be transparent about how we handle your data.

We scan your code to find bugs. We do not train our AI on your code. We delete your data quickly.

1. Information We Collect

Precogs AI processes data to provide security scanning services. We act as a Data Processor on your behalf.

• Source Code & Binaries: When you install our GitHub/GitLab Apps, we fetch the content of files (Source Code, IaC, Dockerfiles, Binaries) targeted for scanning.
• Metadata: We process repository metadata (e.g., file names, commit history) to provide context for our findings.
• Scan Results: We store the results of our scans (vulnerabilities, secrets found, and suggested fixes) to display in your dashboard and PRs.
• Identity & Account Data: We collect email addresses and user IDs to manage your account and subscription.

2. AI Training and Code Privacy

This is our commitment to your intellectual property:

• No Training on Customer Data: Precogs AI does NOT use your Source Code, Binaries, or PII to train or improve our proprietary AI models. Your code is used strictly for the purpose of generating a security report for you.
• Model Isolation: The AI models used to analyze your code are isolated. We do not use your data in a way that could affect the results of other customers.

3. Data Retention and Deletion

We follow a "Minimal Retention" principle.

• Scan Duration: Your Source Code and Binaries are held in secure, ephemeral memory only for the time required to complete the scan (typically less than 24 hours).
• Automatic Deletion: Once the scan is complete and the results are delivered, the raw Source Code and Binaries are irreversibly deleted from our systems.
• Findings Storage: We store the findings (e.g., "Vulnerability found at line 42") and remediation suggestions indefinitely (or until you delete your account) so you can track your security posture over time.
• Secrets: If our engine detects a leaked secret (API Key, Token), we log the location and severity, but we mask the actual secret value in our database.

4. Data Sharing

We do not sell your data.

• Authorized Personnel: Access to your data is strictly limited to authorized Precogs AI personnel for the purpose of maintaining the service and technical support.
• Subprocessors: We use industry-standard infrastructure providers (e.g., AWS, Azure) to host our application. These providers are bound by strict data processing agreements.
• Security Integrations: If you enable integrations (e.g., Tenable, Armis, Jira), we transmit aggregated findings (vulnerability metadata) to these services. We do not transmit your raw source code to these partners.

5. Data Security

We implement enterprise-grade security measures:

• Encryption: All data is encrypted in transit (using TLS 1.2+) and at rest using AES-256 encryption.
• Access Controls: We use Role-Based Access Control (RBAC) to limit access to production data.
• SOC 2 Compliance: We are committed to SOC 2 Type II standards and undergo regular third-party audits.

6. Your Rights (GDPR & CCPA)

Under GDPR and CCPA, you have the right to:

• Access: Request a copy of the data we hold about you.
• Delete: Request the deletion of your account and associated data.
• Export: Receive a machine-readable copy of your data.

To exercise these rights, please contact us at support@precogs.ai

7. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: support@precogs.ai
• Website: www.precogs.ai
• Address: Precogs AI Ltd - 5 Bolton St, London W1J 8BA