Short, because we collect very little.
Free scans: the public repository name you submit, and
your IP address (kept briefly, in memory, solely for rate limiting). Scanning fetches only public git
metadata — never source code contents. Scan results for public repos may be cached and served to other
visitors.
Diligence requests: the name, email, company, and context you submit, plus your IP address and
a timestamp, stored so we can respond. We use these only to handle your request.
What we don't do: no accounts, no tracking cookies, no analytics scripts, no advertising, no
sale or sharing of your information with third parties. Server logs are used for operating and
securing the service, and we keep aggregate, non-identifying traffic statistics (daily page
counts and salted-hash visitor tallies — raw IP addresses are not stored in them).
Diligence requests are kept only as long as needed to handle them. Email support@graspscore.com to access or delete anything you've submitted — we honor deletion requests without ceremony. If you are in the EU/UK: the legal basis for processing lead submissions is your consent and our legitimate interest in responding; the data controller is SolarMark Software LLC, which operates the Grasp service (contact above).