Privacy Policy

1. Overview

InfraMap (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our services, websites, applications, and related products (collectively, the “Service”).

By using InfraMap, you agree to the collection and use of your information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect basic profile information such as:

• Name
• Email address
• Password (encrypted)
• Organization or team name

2.2 AWS Metadata (Read-Only)

To generate your infrastructure maps, cost analysis, and findings, InfraMap retrieves read-only metadata from your AWS environment, including:

• Resource configurations (EC2, RDS, Lambda, ECS, VPC, etc.)
• Tags and relationships between resources
• Cost and usage summaries
• Security group rules and settings

We do not request or access any customer data stored inside your AWS resources.

2.3 Usage Data

We collect anonymized usage analytics to understand how InfraMap is used and to improve the platform. This may include:

• Feature usage (e.g., number of scans, views)
• Interaction events
• Performance logs and error reports

3. How We Use Your Information

Your information is used strictly for improving and operating the Service:

• To provide infrastructure mapping and analysis
• To generate cost, security, and optimization findings
• To improve product performance and user experience
• To communicate with you regarding updates or important notices
• For security monitoring and fraud prevention

4. Data Storage & Security

We apply industry-standard security practices to safeguard your data, including:

• Encrypted storage of sensitive information
• Role-Based Access Control (RBAC) for internal systems
• REST and in-transit encryption (TLS)
• Limited retention policies for logs and scans

Your AWS credentials remain under your control — we use a read-only IAM Role with least-privilege permissions for scanning.

5. Data Ownership

You retain full ownership of your AWS metadata and account information. InfraMap acts solely as a processor and does not claim rights over your data.

6. Sharing of Information

We do not sell or share your personal information with third parties, except:

• With service providers who assist in running the platform (e.g., hosting, analytics)
• When required by law or legal request

Providers have access only to the minimum data needed to perform their role.

7. Cookies & Tracking

InfraMap uses cookies or local storage to handle authentication, session state, and analytics. You may disable cookies in your browser, though certain features may not function correctly.

8. Data Retention

We retain account data, scan results, and logs only as long as necessary to operate the Service or comply with legal obligations. You may request deletion of your account at any time.

9. Children’s Privacy

InfraMap is not intended for children under 16. We do not knowingly collect personal information from children.

10. International Transfers

If you are accessing InfraMap from outside Australia, your data may be transferred and processed in other countries where our service providers operate. These transfers comply with applicable data-protection regulations.

11. Your Rights

Depending on your region, you may have rights to:

• Access or export your data
• Correct inaccurate information
• Request deletion
• Object to or restrict certain processing

Requests can be submitted to: info át inframap.cloud

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or through the dashboard.

13. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:
info át inframap.cloud