Privacy Policy & Data Protection
Effective Date: October 14, 2024 • Last Updated: October 2024
1. Commitment to Enterprise Code Privacy
DocuPulse Inc. ("DocuPulse", "we", "us", or "our") provides an autonomous API documentation and synthetic integration testing platform. We understand that your source code, Abstract Syntax Trees (ASTs), API schemas, and internal routes represent proprietary trade secrets.
We operate under a strict zero-retention model: we never train public artificial intelligence models on your source code, endpoints, or generated test suites.
2. Anthropic Commercial API Data Protection
DocuPulse leverages the Anthropic Claude API (specifically Claude 3.5 Sonnet and Claude 3.5 Haiku) for AST route decompilation and test synthesis. All data transmitted to Anthropic via our platform is governed by Anthropic's Commercial Terms of Service:
- No Model Training: Anthropic does not use customer inputs (source code, route definitions, schemas) or outputs to train its generative models.
- Encrypted In-Transit & At-Rest: All inference requests are transmitted over TLS 1.3 strict encryption.
- Zero Prompt Retention: Prompts and completions are processed in volatile memory and purged following response completion.
3. Information We Collect
We collect only the minimal metadata required to orchestrate CI/CD documentation workflows:
- Account Credentials: Name, work email address, company name, and encrypted authentication tokens.
- Source Control Webhook Diff: Commit hashes, modified route file paths, and AST route signatures sent by GitHub or GitLab webhooks.
- Generated Artifacts: OpenAPI 3.1 JSON schemas and Playwright/Jest test scripts saved strictly within your authorized Amazon S3 Spec Vault.
4. Compliance & Security Standards
DocuPulse infrastructure is architected in accordance with SOC2 Type II, ISO 27001, and GDPR guidelines. All persistent credentials and webhook secrets are encrypted with AWS KMS Customer Managed Keys (CMK) utilizing AES-256 encryption.
5. Contact Our Privacy Team
For data protection officer (DPO) inquiries, security audits, or data deletion requests, contact us directly at:
Subject: Attention: DocuPulse Data Protection Officer