Legal · Draft · pending counsel review

Privacy Policy

How PSCO.ai handles personal data. Draft pending counsel review.

Updated 2026-11-09

This is a placeholder. The Privacy Policy is being drafted with counsel and will replace this page before public launch.

What the policy will cover

Personal data PSCO holds: customer user names and emails, Officer HR data (restricted to PSCO administrators), auditor emails, and the contact details submitted through the quote and booking forms. PSCO holds no end-user data from customer systems.
Source code: diffs and file contents are fetched from GitHub on demand, held in memory for the review session, and never written to PSCO's database, storage, logs or caches. See the Trust page for the full code-at-rest policy.
Subprocessors, listed on the Trust page, including Anthropic for review packet summaries.
Retention: evidence records (attestations and Evidence Packs) are retained for seven years; other personal data is deleted on request subject to that carve-out.
Analytics: PostHog product analytics on the public site and the dashboard, named for the launch funnel.
Your rights, and how to exercise them.

Until the policy is published, data requests can be made through the booking page.