At Panoptes, your privacy and the security of your cloud infrastructure are our highest priorities. This Privacy Policy explains how we collect, use, and protect your information when you use our multi-cloud management platform.

1. Data We Collect

Account Information: Name, email address, and organization details when you register.
Cloud Metadata: Read-only metadata regarding your AWS, GCP, and Azure resources (e.g., resource IDs, statuses, IP addresses, tags) to generate your dashboard.
Billing Metrics: Cost and usage data fetched from your cloud provider to provide FinOps recommendations.

2. How We Protect Your IAM Credentials

Cloud credential storage

We never store your cloud credentials (AWS Access Keys, GCP Service Accounts, Azure Secrets) in plain text. Cloud credentials, saved kubeconfigs and uploaded state are encrypted with AES-256-GCM before database storage. They reach the Panoptes backend and are decrypted for provider operations. Cloud-account responses exclude the stored credential value. This does not establish identical encryption for every integration secret or timed memory erasure.

3. How We Use Your Information

We use your information exclusively to:

Provide and maintain the Panoptes platform.
Generate cost optimization insights and security drift alerts.
Respond to AI questions by sending the question and selected stored workspace context to Groq. Credential fields and raw provider payloads are excluded, but labels and selected identifiers can be included. Do not put secrets in questions or labels.
Send critical system notifications (e.g., budget alerts, security warnings).

4. Data Sharing and Disclosure

Platform operation can involve configured hosting/database/email providers, Groq for AI inference and Slack/webhook receivers you configure. A shared report URL grants access to its report to anyone holding that active URL. Contact us for deployment-specific processor, residency and retention details; a generic confidentiality agreement for every service is not established here.

5. Your Rights

Contact us for account-data access, export or deletion fulfilment. A complete personal-account purge worker and backup-erasure lifecycle are not implemented, so the older API's 30-day message must not be treated as a guaranteed deletion schedule. The newer owner-only organization-deletion API is a separate destructive cascade workflow; it does not establish deletion from every backup or external processor.

Disconnecting a cloud account removes selected active connection records and related data through its handler. It is not a guarantee of immediate erasure from every related collection, backup, audit record or external receiver.

6. Contact Us

If you have any questions about this Privacy Policy or our security practices, please contact our security team at panoptes.cloud@gmail.com.