Privacy Policy

Welcome to Secure-Compose, your trusted ally in fortifying software projects with enhanced security and transparency.

We understand the importance of your privacy and want to be transparent about how we collect, use, and share your information. This privacy policy applies to our software bill of materials (SBOM) generation tool and associated services.

Information we may collect from you

We collect different types of information depending on how you interact with our tool:

  • Basic Account Information: If you choose to create an account using Google authentication, we collect your Google email address and profile picture.
  • Software Dependency Information: We collect information about the dependencies mentioned in your provided files, such as:
    • For Python: Package and version from requirements.txt
    • For JavaScript: Package and version from package.json and package-lock.json
    • For Java: Package and version from pom.xml
    • For Zip Upload: All dependencies and associated files extracted from the uploaded zip file

Please note that we do not collect the actual source code of your project, regardless of the method you choose for SBOM generation.

How We Use Your Information

We use the information we collect for the following purposes:

  • Generate SBOMs: We use the dependency information to generate accurate and detailed SBOMs for your software project.
  • Improve our services: We may use your information to improve our tool&apros;s accuracy, functionality, and user experience.
  • Communicate with you: We may use your email address to send you updates about our tool, new features, and relevant security information.

Data Security

We take appropriate security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, security reviews, and access controls.

Changes to this Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on our website. You are advised to review this privacy policy periodically for any changes.

Contact Us

If you have any questions about this privacy policy, please contact us by creating a ticket.