Legal

Four documents, versioned and dated. Each is downloadable as a PDF and each states what changed from the previous version.

Terms of service

Last updated 8 January 2026. These terms govern your use of OAuthRadar. The binding version is the agreement executed with your organisation; this page is the plain-language summary.

OAuthRadar reads OAuth grant metadata from the providers you connect and gives you inventory, scoring, alerting and revocation. Revocation acts at the provider and is irreversible for the user whose grant it was. You confirm you are authorised to connect the providers you connect and to revoke grants within them.

You may close the account at any time. On closure, scanning stops, stored tokens are deleted within one minute of disconnect, and the remaining account data is removed within 60 days.

Versions

DOCUMENTVERSIONUPDATEDDownload
Privacy policyv42026-03-12Download
Terms of servicev32026-01-08Download
Data processing agreement (DPA)v22025-11-20Download
Sub-processor listv72026-04-02Download