Privacy Policy

Overview

This policy explains what information IaCConsole collects when you use our website, web console, CLI, and related services, why we collect it, and what choices you have. We aim to collect only what we need to operate the product and keep your account secure.

Who we are

IaCConsole ("IaCConsole", "we", "us") provides an AI-assisted platform for Terraform and OpenTofu. For privacy questions, contact dima@iacconsole.com.

Information we collect

Account information

• Your name or account name, email address, and account identifier.
• If you sign in with GitHub, your GitHub profile identifier and the name and email made available by GitHub.
• Authentication data needed to sign in to your account.

Infrastructure and usage data

• Projects, units, dimensions, deployment history, and generated Terraform or OpenTofu code that you create or store in the service.
• Assistant conversations and prompts you send to the AI agents.
• Environment variables you choose to save in your account for use by your deployment workflows.
• Input and output token counts, plan information, and usage records used for billing.

Integrations

• If you connect Slack, we store the workspace identifier, workspace name, and the bot token needed to send and receive messages for your installation.
• If you connect a source control or identity provider, we receive the information that provider sends as part of the authorization flow.

Technical and communications data

• Technical logs such as IP address, browser type, timestamps, and error information, used to operate and secure the service.
• Messages you send to us, including support requests, demo bookings, and security reports.

How we use information

• Provide, operate, and improve the platform and the open-source CLI.
• Authenticate you and protect your account and the service from abuse.
• Generate infrastructure code and run the AI agents you request.
• Track token usage and calculate charges for metered plans.
• Respond to support, sales, and security inquiries.
• Comply with legal obligations and enforce our terms.

Legal bases for processing (EEA and UK)

Where data protection law requires a legal basis, we rely on performance of a contract (providing the service), our legitimate interests (operating and securing the service), consent (where we ask for it), and legal obligations.

Cookies and analytics

We use essential cookies to keep you signed in and to protect forms against cross-site request forgery. These cookies are required for the service to work.

Our marketing pages use Google Tag Manager to load analytics tags. Those tags may set cookies or collect usage information such as pages visited and referral source. You can block or delete cookies in your browser settings; essential sign-in cookies are required for the console.

Third-party services

We use service providers to operate IaCConsole, including:

• Google Cloud for hosting and for Vertex AI, which powers the AI agents.
• GitHub for optional sign-in and source control integration.
• Slack for the optional Slack integration.
• Cloudflare for content delivery, DNS, and security.
• Cal.com for booking intro calls.
• Google Tag Manager for analytics on marketing pages.

These providers process information under their own terms and privacy policies. We do not sell your personal information.

Data retention

We keep account and infrastructure data for as long as your account is active. If you delete your account, we delete or anonymize the associated data within a reasonable period, except where we need to retain it for legal, security, or billing purposes. Technical logs are kept for a limited period unless needed to investigate an incident.

Security

We use technical and organizational measures designed to protect your information, including access controls, encrypted transport, and separation between the control plane and infrastructure execution. In Secure Agent Mode, Terraform runs in your environment and your cloud credentials do not need to leave it. No system is completely secure, so we cannot guarantee absolute security.

International transfers

Our providers may process information in countries other than yours. Where required, we rely on appropriate safeguards for those transfers, such as standard contractual clauses offered by the provider.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, email dima@iacconsole.com. You may also have the right to complain to your local data protection authority.

Children

The service is intended for professional and educational use by people aged 16 and over. We do not knowingly collect personal information from children under 16.

Changes to this policy

We may update this policy as the product changes. We will post the updated version on this page and change the date above. If a change is material, we will take reasonable steps to notify account holders.

Contact

Questions about this policy or your data? Email dima@iacconsole.com.