Privacy Policy

Last updated: August 5, 2026

1. Introduction

Night Lite USA LLC ("Night Lite," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. ProvenanceOS is a Developer312 product brand operated by Night Lite USA LLC, 25200 Carlos Bee Blvd, Hayward, CA 94542. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our website and services, and it tells you about the rights you have over that data.

2. Information We Collect

We collect information you provide directly to us, such as when you create an account, contact us, join the waitlist, or use our services. This may include:

• Name and email address
• Company information
• Billing information, collected by our payment processor when you add a payment method or are charged. A card is not required to start a 14-day Launch or Growth trial.
• Repository metadata (for example, repository URL and provider). You do not upload source code to us; how public repository content is read during a scan is described in section 4.

We also collect limited technical information automatically when you use the service, including IP address, user agent, and event-level logs needed to operate the platform and respond to security incidents.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process transactions and send invoices for paid engagements
• Communicate with you about updates, security alerts, and operational notices
• Improve our platform and develop new features
• Detect, prevent, and respond to security incidents and abuse

We rely on the following legal bases under the EU GDPR when processing personal data of individuals in the European Economic Area: performance of a contract (providing the service you requested), our legitimate interests (operating, securing, and improving the service), compliance with legal obligations, and — where required — your consent.

4. What We Process and What We Retain

Our data-handling practices are documented in detail on the Security page. The qualitative state today is:

• Source files are read transiently and are not retained. To compute an AI-origin score, each scan fetches a bounded sample of the repository's JavaScript, TypeScript, and Python files (up to 40 files / 512 KB) from the repository host, holds the content in memory only while the scan runs, and discards it. The paths of the sampled files, not their content, are stored with the scan result and are deleted with the job or on account deletion. Archive and source-file uploads are not available.
• Repository metadata for public GitHub, GitLab, and Bitbucket URLs is retained for the life of the account so job history is queryable, and is deleted on account deletion. Private GitHub repositories can be scanned with a connected GitHub token. Private GitLab and Bitbucket repositories are not available.
• Dependency and vulnerability results are derived from supported npm and PyPI manifests and OSV checks. They are retained with the scan job so results remain queryable, and are deleted with the job or on account deletion.
• AI-origin and policy results — the score, its confidence, the contributing signals, the sample coverage, and the policy evaluation — are derived from the same scan and retained with the scan job on the same terms.
• CycloneDX export is available after a scan completes. It is generated for download from the completed scan, not retained as a compliance report.
• Repository-provider tokens — optional. An organization can connect a GitHub personal access token (Integrations → GitHub) so scans can read private repositories; the token is validated on connect, stored encrypted at rest (AES-256-GCM), displayed only as its last four characters, and sent only to GitHub as scan authorization. Disconnecting deletes the stored copy. GitLab and Bitbucket tokens and provider OAuth/sync are not available.

Retention windows for paid tiers will be finalized at general availability and stated on the pricing page. Archive uploads, policy enforcement, and compliance reports are planned. Repository content is never used to train models.

5. Data Security

Built to SOC 2 controls — compliance evidence generation is on the roadmap. All data is encrypted in transit with TLS 1.3 and encrypted at rest by our infrastructure providers; at-rest keys are managed by the hosting layer. Production access is scoped and audited. A full security disclosure and responsible-disclosure policy is published at /security and /.well-known/security.txt.

6. Subprocessors

We engage a limited set of subprocessors to operate the service. The same list is linked from the Trust Center. As of the date above, these are:

• InsForge — Managed Postgres, authentication, and transactional email (account verification, password-reset codes, and messages sent from the contact and waitlist forms).
• Railway — Application hosting. The ProvenanceOS service process runs here.
• Cloudflare — CDN and reverse proxy for provenance-os.com, DNS for the domain, and email routing for support@provenance-os.com.
• OSV.dev — Vulnerability lookups. A scan sends dependency identifiers (ecosystem, package name, and version) to api.osv.dev. Source file content is not sent.
• GitHub — Repository file reads for github.com URLs, including private repositories when an organization connects a personal access token. Connecting a token calls the GitHub API to validate it.
• GitLab — Public repository file reads for gitlab.com URLs. There is no GitLab account connection, and private GitLab repositories are not scanned.
• Bitbucket — Public repository file reads for bitbucket.org URLs. There is no Bitbucket account connection, and private Bitbucket repositories are not scanned.
• Stripe — Launch and Growth checkout and the billing portal. Payment card data is collected by Stripe. ProvenanceOS does not store the card number.
• Google — Sign in with Google. Google Analytics and Google Tag Manager load only after you consent to analytics.

We will give at least 30 days' notice by email and on this page before adding a new subprocessor that handles personal data. To object to a new subprocessor, contact us at the address below before the change takes effect.

7. International Data Transfers

Night Lite USA LLC operates ProvenanceOS from the United States. If you access the service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States. Where required by applicable law (for example, the EU GDPR for data of EEA individuals), we rely on appropriate safeguards — such as Standard Contractual Clauses — for transfers from your jurisdiction to ours. Contact us if you require a copy of the relevant safeguards.

8. Your Rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data, subject to limited exceptions
• Portability — receive your data in a commonly used, machine-readable format
• Restriction or objection — restrict or object to certain processing
• Withdrawal of consent — where processing is based on consent, withdraw it at any time
• Opt-out of sale or sharing for cross-context behavioral advertising — ProvenanceOS does not sell personal data and does not engage in cross-context behavioral advertising

To exercise these rights, email support@provenance-os.com with the subject line "Data Subject Request." We will acknowledge your request within 5 business days and respond within 30 calendar days (45 days where extension is permitted by law, with notice of the extension). California residents may also designate an authorized agent to make a request on their behalf.

9. Children

ProvenanceOS is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or security reasons. Material changes will be posted on this page with an updated date. Your continued use of the service after changes take effect constitutes acceptance, except where the law requires additional notice or consent.

11. Contact

Questions about this Privacy Policy, data subject requests, or subprocessors should be sent to support@provenance-os.com. Night Lite USA LLC, 25200 Carlos Bee Blvd, Hayward, CA 94542. Phone: (510) 591-0163.