Privacy Policy

Entroptics ("we," "us") operates the website at entroptics.com and two products: Entroptics Shield, a behavioral anomaly detection service for AWS S3, and Entroptics Vision, a visual quality inspection product for manufacturing. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using our website or platform, you agree to the practices described in this policy. If you do not agree, please do not use our services.

Contact and demo requests

When you contact us or request a demo through the website, we collect the details you enter: your name, work email, company name, and optionally your phone number, country, team size, product interest, and message. We use them only to respond to your request and follow up about it.

Shield account data

When you sign up, we collect your company name, work email address, and password (hashed and stored by AWS Cognito — we never store plaintext passwords). If you subscribe to a paid plan, we collect billing information through our payment processor (Stripe). We do not store credit card numbers on our servers.

Shield: CloudTrail event metadata

Our platform processes AWS CloudTrail API event metadata from your environment. This includes: principal ARN, event name (e.g. GetObject, PutObject), source IP address, S3 bucket name, object key prefix, timestamp, and HTTP response code.

We never read, access, or store your actual S3 file contents. Object data remains exclusively in your AWS account. Our edge Lambda extracts event metadata and discards everything else before transmission.

Vision: inspection data

Entroptics Vision is deployed with each manufacturer under a written agreement. How inspection images and production data are collected, stored, and retained is set out in that agreement before deployment.

Usage data

We collect standard usage analytics: pages visited, features used, session duration, browser type, and device information. This helps us improve the product. We do not sell this data to third parties.

• Respond to contact and demo requests
• Provide and operate our products
• Build behavioral baselines and detect anomalies in your S3 access patterns
• Send alerts and notifications you have configured
• Generate reports and analytics within your tenant
• Process billing and manage your subscription
• Improve the platform based on aggregate usage patterns
• Communicate product updates, security notices, and support responses

We do not use your CloudTrail event metadata for any purpose other than providing the detection service to your tenant. We do not train models across tenants — each tenant's behavioral baselines are isolated.

All tenant data is isolated at the infrastructure level. DynamoDB records include tenant ID as part of the primary key. Cross-tenant queries are structurally prevented by the data model.

All data in transit is encrypted with TLS 1.2+. All data at rest is encrypted with AES-256 using AWS-managed keys. See our Security page for full details.

CloudTrail event metadata is retained according to your plan's alert history window (3 to 90+ days). Behavioral baselines are retained for the duration of your subscription. When you cancel, all tenant data — including baselines, alerts, incidents, and event metadata — is permanently deleted within 30 days.

Audit logs are retained for 730 days (2 years) for compliance purposes, then automatically purged.

Account data (email, company name) is retained for 90 days after account closure, then deleted.

We use the following third-party services to operate the platform:

• AWS — Infrastructure hosting, Cognito authentication, KMS encryption
• Stripe — Payment processing (PCI DSS compliant)
• Slack / PagerDuty — Alert delivery (only when you configure these integrations)

We do not sell, rent, or share your data with advertisers or data brokers.

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Update or correct inaccurate data
• Deletion — Request deletion of your account and associated data
• Export — Export your alerts, incidents, and reports via the platform API or CSV export
• Objection — Object to processing of your data for specific purposes

To exercise any of these rights, contact contact@entroptics.com. We will respond within 30 days.

We use essential cookies for authentication and session management. We use analytics cookies to understand how the platform is used. We do not use advertising or tracking cookies. You can disable non-essential cookies in your browser settings.

We may update this policy from time to time. We will notify you of material changes via email or an in-app notification at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy-related questions or requests:

Entroptics
Email: contact@entroptics.com