Short, because Grasp collects very little.
Free scans: the public repository name you submit, and
your IP address (kept briefly, in memory, solely for rate limiting). Scanning fetches only public git
metadata, never source code contents. Scan results for public repos may be cached and served to other
visitors.
Diligence requests: the name, email, company, and context you submit, plus your IP address and
a timestamp, stored so your request can be answered. They are used only for that.
What Grasp does not do: no accounts, no tracking cookies, no analytics scripts, no advertising, no
sale or sharing of your information with third parties. Server logs are used for operating and
securing the service, and Grasp keeps aggregate, non-identifying traffic statistics (daily page
counts and salted-hash visitor tallies; raw IP addresses are not stored in them).
Diligence requests are kept only as long as needed to handle them. Email support@graspscore.com to access or delete anything you've submitted. Deletion requests are honored without ceremony. If you are in the EU/UK: the legal basis for processing lead submissions is your consent and the legitimate interest in responding; the data controller is SolarMark Software LLC, which operates the Grasp service (contact above).