Privacy Policy

Last updated: June 1, 2026

1. Overview

0scp ("we") provides a security governance platform sold through AWS Marketplace and deployed into the customer's own AWS account. This policy explains what limited data we process to operate licensing and support.

2. What we collect

• Marketplace identifiers — CustomerIdentifier, ProductCode, AWS account id, and entitlement details (dimension, quantity, expiration) needed to issue and validate your license.
• Account information — contact email and authentication identity used to sign in to the customer portal.
• Support communications — information you send us when requesting help.

3. What we do not collect

The 0scp platform runs inside your AWS account. Your security findings, policies, logs, and configuration data remain in your account and are not transmitted to us, except where you explicitly share them for support.

4. How we use data

To provision and validate licenses, provide the customer portal, respond to support, and meet legal obligations. We do not sell personal data.

5. Retention

Licensing records are retained for the life of the subscription and a reasonable period thereafter for audit and compliance.

6. Your rights

You may request access to or deletion of your account data, subject to legal and contractual constraints, by contacting us.

7. Contact

Privacy inquiries: privacy@0scp.com.