Privacy Policy
What we collect
Account data (name, email, company), billing data (handled by Paddle — we never see your card details), and aggregate operational telemetry from your instance: CPU, memory, disk, error rates, response times, and coarse counts (sites, open work orders). We never collect work order contents, customer names, or raw sensor readings.
Why telemetry leaves your isolated instance
Streaming aggregates to the control plane is how we detect an unhealthy instance before you do. This is disclosed here and in the DPA, and is limited exactly to the fields listed above — never business data.
Where your data is hosted
eu-west-1 (Ireland). Backups are encrypted and stored in S3 with lifecycle rules moving them to cold storage after 30 days.
Retention
Raw telemetry: 7 days. Hourly rollups: 90 days. Daily rollups: 13 months. Account data and backups: retained through 6 months of cold storage after cancellation, then permanently deleted.
Your rights
Access, rectification, and deletion requests are handled per our published SLAs — see the DPA. Structured data export is self-serve in the portal at any time while your subscription is active.
International transfers
Our operating entity is South African; infrastructure is in the EU (Ireland). Standard Contractual Clauses govern transfers where applicable.