Legal
These three documents are not published yet. This page says so rather than showing text that has not been reviewed — a policy you cannot honour is worse than one that does not exist.
Legal notice
Publisher identity, registration number and registered address, plus the hosting provider. Required of any French commercial site under the LCEN.
Blocked on one thing: the business is not registered yet, and this document is mostly its identity.
Privacy notice
What is collected, why, on what legal basis, for how long, who processes it and how to exercise your rights.
In the meantime, the short version: the free scanner sends nothing at all
— no account, no network call outside GitHub. With a licence key, a scan
reports the repository name, who ran it, whether it blocked, and each
finding: its category, severity, resource, file, line and message. A
message can quote a value from your code. Not your Terraform files and
not your diff — with one exception you switch on yourself: AI auto-fix
sends the affected .tf files to our service, which passes
them to a hosted AI model in the United States and returns proposed code.
Signup stores the company name, work email and declared team size.
Terms of service
Subscription terms, billing and cancellation, liability, and the commitment that customer findings and usage are never used to train models.
Ask a person
Any question about data handling, a security review, or a DPA: foad@talsi.dev. Deletion and data export are already built into the dashboard, under /account and /reports.