Privacy Policy

This policy explains how Auterim handles information when you visit auterim.com, use the free tools, or create and use an Auterim workspace. It applies to account holders, the people they invite to a workspace, and visitors to the site.

Auterim is a business service. It is built to monitor software, APIs and infrastructure, not to profile individuals.

You give us information when you create an account, set up a workspace, confirm the dependencies you rely on, or contact us. We only ask for what the service needs to work.

• Your email address and a password. Passwords are handled by our authentication provider and are never stored by Auterim in readable form.
• Your role within a workspace, such as owner, admin or member.

• Your company website address and workspace name.
• Optional context you add to help Auterim judge relevance, such as how critical a dependency is, which features or endpoints you use, and short notes about your setup.

The list of external services your business relies on, whether discovered by Auterim or added by you, along with the changes Auterim finds for them, deadlines, and the actions taken on each.

When you ask Auterim to scan a website, it reads the pages a browser would load from that site, such as markup, scripts, headers and linked hosts, to suggest services the site appears to use. It does not log in, submit forms or access anything behind authentication.

A scan from the free scanner on our site is not saved against your identity. Scans you run inside a workspace are saved to that workspace so you can confirm the results.

You can choose to connect GitHub, Slack, Linear or Sentry. Each connection asks only for the access its feature needs, and you can revoke it at any time.

• GitHub. Read-only access to the contents of the repositories you select. Auterim reads a bounded set of files to check whether a change affects your code or configuration. It does not keep copies of your source code. It stores the finding itself, such as the file path, line, commit and a short explanation, with secret-shaped content redacted.
• Slack. Permission to list channels and post the alerts you route there.
• Linear. Permission to read your workspace structure and create issues for changes you choose to hand off.
• Sentry. Read access to summaries of unresolved issues in a limited number of projects, used as a relevance signal.

Access credentials for connected services are encrypted before they are stored.

We keep the operational records needed to run the service, such as monitoring runs, scan results, delivery status of alerts, and an audit trail of connector events.

On the public site we count a small set of first-party events, such as a page view or a started signup, together with the page and any campaign tags in the link. These events are not tied to a cookie or an advertising identifier. We do not use third-party analytics or advertising trackers.

Paid plans are billed through our payment provider. Auterim shares your email address and workspace reference with it to create your subscription. Card details are entered with the payment provider and are not received or stored by Auterim. We keep the plan, status and billing period of your subscription.

• To discover and monitor the services you depend on and detect changes to them.
• To decide whether a change is material and whether it is relevant to your workspace.
• To verify impact in connected repositories when you have enabled it, and to prepare remediation guidance for review.
• To send the alerts and handoffs you have configured.
• To run, secure and support the service, and to bill for it.

Auterim uses a language model provider to classify changes and to assess their impact on a workspace. Requests contain the change evidence and a bounded, redacted summary of the relevant workspace context. They are sent with storage disabled at the provider, and they are not used by Auterim to train models. Results are recommendations for people to review.

Every request to your workspace is authorized on the server, and database access is restricted per workspace. See the Security page for how Auterim protects operational data.

We use a small number of providers to host and run Auterim, such as infrastructure, database, background processing, language model analysis, email and payments. They process information only to provide their service to us. We do not sell personal information.

We keep account and workspace information for as long as your account is active and as needed to provide the service, meet legal obligations, and resolve disputes. You can ask us to delete your account and workspace data by writing to support@auterim.com.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to or restrict how it is used. To make a request, write to support@auterim.com from the email address on your account. You can also disconnect any connected service from your workspace at any time.

Our service providers may process information in countries other than your own. Where that happens, we rely on the safeguards those providers offer for international transfers.

We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell account owners before it takes effect.

For privacy questions or requests, write to support@auterim.com.