Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how Sudarshana (“we”) collects, uses, and protects information when you use the Sudarshana security platform (the “Service”).

1. Information we collect

• Account data:name, email address, and authentication details, managed via our identity provider (Clerk).
• Organization data:your organization and role, derived in part from your email domain.
• Service data:assets, scopes, scan results, and findings you create or that the platform discovers on your behalf.
• Usage data:logs and telemetry used to operate and secure the Service.

2. How we use information

We use your information to provide and improve the Service, authenticate users, scope and run authorized security assessments, and maintain security and compliance.

3. Authentication & Clerk

Authentication is handled by Clerk. Your credentials and session data are processed by Clerk in accordance with their privacy practices. We store an organization association in account metadata to enable self-serve features.

4. Sharing

We do not sell your data. We share information only with service providers that help us operate the Service (e.g., identity, hosting, error monitoring, and internal team messaging), and as required by law.

When you create an account, your name, email address and the time you signed up are sent to our internal team messaging tool so that a person is notified of the new account. No other personal data is sent there, and it is not used for marketing.

5. Data retention

We retain data for as long as your account is active or as needed to provide the Service, comply with legal obligations, and resolve disputes.

6. Security

We use technical and organizational measures, including tenant isolation and access controls, to protect your data. No method of transmission or storage is completely secure.

7. Cookies and similar technologies

We use strictly necessary cookies to sign you in, keep you signed in, and remember your cookie choice. Those are required to deliver the Service and cannot be switched off. Anything beyond that is optional and is not stored unless you agree to it first: we ask before it is set, refusing is exactly as easy as accepting, and we use no advertising or cross-site tracking cookies at all.

Every cookie we set is enumerated, with its purpose and duration, in our Cookie Policy, which is also where you can change or withdraw your choice at any time. Signed-in users can do the same from Settings, then Privacy, in the console.

8. Your rights

Subject to applicable law, you may access, correct, or delete your personal data, including via account settings in your profile. Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of what we did before you withdrew it.

9. Contact

Questions about privacy? Contact privacy@sudarshana.io.