Account and project information
A private workspace stores account information, selected project details, imported package names and exact versions, inventory timestamps, findings, response notes, verification evidence, self-reported exposure context, static repository baseline evidence, playbook answers and task history, and delivery records. Avoid placing credentials or unrelated personal information in inventory or response fields.
Connected providers
Repository connections process provider identity, repository identifiers, selected branches and inventory paths, commit revisions, connection status, and synchronization results. Provider credentials are used on the server; public API and MCP output do not include them.
Email choices
Public subscribers provide an email address, topic preferences, confirmation state, and delivery history. Public subscriptions require address confirmation and can be managed without a Wisesama account. They remain separate from private account alerts.
Email delivery uses the configured provider. A provider may report acceptance, failure, bounce, or complaint. Unsubscribed or suppressed public addresses are excluded from subsequent digest delivery.
Intelligence requests
Assessing package metadata requires looking up package names and versions with upstream intelligence services. Public advisory reads use public source records. Review the upstream sources linked in an advisory before relying on their content.
Retention, deletion, and operator details
Disconnecting a repository stops future access through that connection. It does not delete prior assessment history. Fixed retention periods, a self-service account deletion flow, a privacy contact, and operator identity have not been finalized for public launch. This early access notice must be completed with those details before production registration opens.