Privacy Policy

We collect the minimum needed to deliver the Service.

• Uploaded packages — the webMethods .zip files you upload, processed in memory and deleted from our servers as soon as the scan completes. Not persisted to a database.
• Derived metadata — service counts, health scores, parsed structure. Returned to your browser; not stored by us.
• Request logs — standard server logs from our hosting providers (timestamps, IP addresses, user agents, response codes). Used for security, debugging, and rate-limit enforcement. Logs do not include uploaded file content.
• Account information — if and when we introduce sign-in, we will collect email, name (as provided by the identity provider), and authentication tokens. This section will be updated when sign-in is launched.

• To analyze your package and return the report you requested.
• To improve service quality, detect abuse, and enforce rate limits.
• To communicate with you about service status or security advisories.
• To comply with legal obligations.

We do not use your packages, scan results, or any other content you upload to train our own machine-learning models or those of our subprocessors.

We share the minimum data necessary with the following third parties to operate the Service. A full, current list with purposes and data shared is published on our Security page:

• Anthropic — when you opt in to AI analysis, parsed metadata is sent to Claude. Credential-shaped strings are scrubbed first.
• Railway — API server hosting (US East).
• Vercel — static frontend hosting and edge delivery.

We do not sell or rent your data to third parties.

Our hosting providers operate globally. By using the Service you understand that data may be processed in jurisdictions outside your country of residence, including the United States. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms with our subprocessors.

• Uploaded packages: deleted within seconds of scan completion. Not persisted.
• Scan results: live only in your browser session. Refreshing the tab loses them. We do not store a copy.
• Server logs: retained per our hosting providers' standard retention windows (typically 7–30 days).
• Account data (when sign-in is introduced): kept as long as your account is active, plus a reasonable period for legal compliance.

We implement the technical and organizational measures described on our Security page, including:

• TLS encryption in transit.
• In-memory processing of uploads with prompt deletion.
• Credential-pattern redaction before any AI processing.
• Origin allowlisting, rate limiting, and modern HTTP security headers.

No system is perfectly secure. If we discover a security incident affecting your data, we will notify affected users in accordance with applicable law.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate personal information.
• Request deletion of your personal information.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority.

Because we do not persist uploaded packages or scan results, much of this is moot for anonymous use. For account-related requests, email privacy@integrabridge.com. We will respond within 30 days.

The Service is intended for business users. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us personal information, please contact us and we will delete it.

The Service uses only the cookies strictly necessary to operate, such as session cookies set by the identity provider (when sign-in is enabled). We do not currently run third-party advertising or analytics trackers. If that changes, we will update this policy and provide a cookie banner.

We may update this Privacy Policy from time to time. Material changes will be announced on this page with an updated "Last updated" date.

For privacy questions, requests, or to exercise your rights, email privacy@integrabridge.com. We will acknowledge within 5 business days.