Privacy Policy

What we record

• Account access state, device and security-operation data.
• Where technically visible: domain, destination IP, DNS, source IP visible at the service entry, access path, node, time, bytes and connection state.
• Full URL paths are best-effort and are not a stable capability.

What we do not record

We do not perform TLS interception or expand collection to obtain URL paths. URL queries, request/response bodies, chat, files, passwords, private keys and full packet contents are outside the product requirement.

Purpose and disclosure

Information supports metering, connectivity, troubleshooting, security, abuse prevention and support. These purposes and retention periods are disclosed in plain language before applying or first use.

Retention

• Raw connection Row Data is retained for 30 days.
• Hourly usage buckets and derived activity indexes are retained for up to 60 days.
• Expired data is deleted automatically; account and audit data follow their own policies.

Access control and audit

Users see only their own limited summaries; authorized organization administrators see member usage totals only; support sees redacted summaries by default. Detailed metadata or raw-data access requires a special permission, purpose, bounded scope and audit. Bulk export is high risk.

Diagnostic upload

Diagnostics exclude passwords, private keys, page content and personal files by default. If domain, destination IP or DNS summaries are included, the scope is disclosed before submission and the user can cancel.

Your rights

Users may request access, correction or deletion through in-product support. Data retained for law, security or transaction audit will follow the stated boundary.