IaCRadarIaCRadar
  • Pricing
Sign In
Sign Up
IaCRadarIaCRadar

Alerts your team the moment a manual change causes drift — know before it breaks something.

© 2026 IACRADAR. All rights reserved.

Get Started
  • Sign In
  • Sign Up
Product
  • How it works
  • Pricing
  • Changelog
Company
  • Contact
Legal
  • Terms of Service
  • Privacy Policy
  • Cookie Policy

Privacy Policy

Last updated: June 2026

On this page
  • 1. Who we are
  • 2. What data we collect
  • 3. How we use your data
  • 4. Legal basis for processing (GDPR)
  • 5. Data sharing
  • 6. Data retention
  • 7. Your rights (GDPR)
  • 8. Security
  • 9. Cookies
  • 10. International transfers
  • 11. Children
  • 12. Changes to this policy
  • 13. Contact and complaints

1. Who we are

IaCRadar is operated by João Machado, based in Lisbon, Portugal. We are the data controller for personal data processed through this service.

Contact: joao@iacradar.dev

2. What data we collect

Account data:

  • Email address (required for account)
  • Name (optional, from OAuth provider)
  • GitHub/Google profile (if you sign in with OAuth)

Workspace data:

  • AWS Account ID
  • S3 bucket names and paths you configure
  • Slack/Teams webhook URLs you provide
  • IAM Role ARNs you provide

Infrastructure data (processed, not stored):

  • Contents of your Terraform state files (read to detect drift, not permanently stored)
  • AWS resource metadata returned by AWS APIs (processed in memory, not stored)

Usage data:

  • Scan timestamps and results
  • Drift events detected (stored for your dashboard)
  • Login timestamps and IP addresses

Technical data:

  • Browser type and version
  • Pages visited on iacradar.dev
  • Error logs

3. How we use your data

  • To provide the drift detection service
  • To send you Slack/Teams alerts when drift is detected
  • To send transactional emails (account confirmation, billing receipts)
  • To improve the service
  • To comply with legal obligations

4. Legal basis for processing (GDPR)

  • Contract: processing necessary to provide the service
  • Legitimate interests: security, fraud prevention, service improvement
  • Consent: marketing communications (where applicable)
  • Legal obligation: tax and accounting records

5. Data sharing

We share data with these service providers:

  • Supabase (database hosting) — EU region
  • Vercel (hosting) — global CDN
  • Railway (Python engine hosting)
  • Stripe (payment processing)
  • AWS (infrastructure for the service itself)

We do not sell your data. We do not share data with advertisers or data brokers.

6. Data retention

  • Account data: retained while your account is active and 30 days after deletion
  • Drift events: retained for the period covered by your plan (90 days Pro, 12 months Team)
  • Billing records: 7 years (legal requirement in Portugal)
  • Terraform state file contents: not retained — processed in memory only

7. Your rights (GDPR)

As an EU resident you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Export your data in machine-readable format
  • Object to processing
  • Withdraw consent

To exercise these rights contact: joao@iacradar.dev. We will respond within 30 days.

8. Security

We use industry-standard security measures:

  • All data in transit encrypted with TLS
  • Database encrypted at rest
  • AWS access via temporary credentials only
  • No permanent AWS credentials stored
  • Regular security reviews

9. Cookies

See our Cookie Policy for details on cookies we use.

10. International transfers

Your data may be processed outside the EU by our service providers. We ensure appropriate safeguards are in place (Standard Contractual Clauses where required).

11. Children

IaCRadar is not intended for users under 18. We do not knowingly collect data from children.

12. Changes to this policy

We will notify you of significant changes by email or prominent notice on the website. Continued use constitutes acceptance.

13. Contact and complaints

Data controller: João Machado

Email: joao@iacradar.dev

You have the right to lodge a complaint with the Portuguese data protection authority: CNPD — Comissão Nacional de Proteção de Dados, www.cnpd.pt