Legal
These three documents are not published yet. This page says so rather than showing text that has not been reviewed — a policy you cannot honour is worse than one that does not exist.
Legal notice
Publisher identity, registration number and registered address, plus the hosting provider. Required of any French commercial site under the LCEN.
Blocked on one thing: the business is not registered yet, and this document is mostly its identity.
Privacy notice
What is collected, why, on what legal basis, for how long, who processes it and how to exercise your rights.
In the meantime, the short version: the free scanner sends nothing at all — no account, no network call outside GitHub. With a licence key, a scan reports the repository name, the number of findings and whether it blocked. Not your Terraform, not the findings themselves, not your diff. Signup stores the company name, work email and declared team size.
Terms of service
Subscription terms, billing and cancellation, liability, and the commitment that customer findings and usage are never used to train models.
Ask a person
Any question about data handling, a security review, or a DPA: foad@talsi.dev. Deletion and data export are already built into the dashboard, under /account and /reports.