Privacy Policy

shaktIQ collects and processes only the information required to execute deterministic breaking change detection, downstream client impact assessment, and release intelligence:

• Service Specifications: YAML and JSON documents describing your endpoints and interfaces submitted via GitHub Webhooks, CLI, or direct upload.
• Account Credentials: Name, work email address, and securely hashed passwords or OAuth provider profile tokens.
• Analysis Metadata: Git commit SHAs, pull request numbers, repository URLs, change fingerprints, and diff verdicts (SAFE / REVIEW / BLOCKED).

We believe your internal schemas and route contracts are proprietary intellectual property:

When AI release dossiers are enabled, shaktIQ sends isolated diff chunks to our secure automated intelligence engine to synthesize non-breaking shim recommendations:

• Your schemas and code are processed solely for the execution of your requested analysis run.
• Data sent for analysis is not retained by third parties or used to train public foundation models.
• AI analysis can be toggled completely off at any time using the AI_EXPLANATIONS_ENABLED=false platform configuration flag.

All platform data is persisted using high-availability enterprise database clusters with end-to-end encryption at rest and in transit. Access tokens are hashed using SHA-256 before storage. Spec snapshot diffs are retained according to your organization's configured data retention policies.

Platform administrators can export all analysis history, project snapshots, and consumer impact matrices at any time via the console dashboard. Organization admins may request complete data purging upon account deletion.