Privacy Policy

DriftSeal is a mAIb Tech product. This policy describes the data used to provide technical analysis and continuous monitoring.

Data we process

We store account email addresses, workspace membership, public component coordinates, normalized evidence, approved baselines, scan history, triage reasons, alert destinations and subscription identifiers. We do not store payment-card details; Stripe processes payment information.

Pasted manifests and uploaded archives are sent to our server when you submit a cloud scan. They are encrypted while queued and deleted from the job record after completion or failure. Avoid submitting secrets or private credential files. For private source, use the local CLI.

Retention and deletion

Anonymous reports expire after 24 hours. Paid scan history is governed by your plan; approved baselines and associated historical events are retained while the workspace exists. Authentication links expire after 15 minutes and sessions after 14 days. Account deletion cancels subscriptions and removes owned workspace records. Provider payment records may remain where required by law.

Database backups may retain deleted records until the backup retention period expires. The deployment runbook defines a 14-day encrypted backup retention target; confirm operational backup status in the release report.

Analytics and providers

First-party product events measure scans, watch activation and subscriptions. Visitor identifiers use an HTTP-only cookie and hashed identifiers. We do not require Google Analytics, advertising trackers or cross-site profiling. Hosting, email and payment providers process data to deliver the service. Operational request logs omit request bodies, query strings, tokens and email contents.

Your choices

You can scan local files without an account or upload. Public status is opt-in. You can export scan reports, revoke CLI sessions, cancel billing and delete your account from the console. Contact support@maib.io about access, correction or deletion requests, with Privacy in the subject.

Policy date

Effective September 21, 2026. The operator is mAIb Tech LLC, a Delaware limited liability company, registered-agent address 8 The Green, STE R, Dover, DE 19901, USA. Contact support@maib.io. Material changes will be reflected here before taking effect.