Privacy policy

Account data

When you sign up we store your name, email address and a hash of your password. If you sign in with Google or GitHub, we store the account ID from that provider. Two-step verification secrets are stored encrypted.

Email addresses invited to a workspace are stored with the invite, including invites that have not been accepted yet.

Sessions and audit log

Each sign-in session stores the IP address and browser user agent, so you can review and revoke sessions in your account settings. Sessions end 30 days after they were last used, and their data is deleted 7 days after they end.

Important workspace actions, such as inviting a member or deleting a server, are recorded in the audit log together with the IP address of whoever did them. Workspace admins can view the audit log.

Data from servers and monitors

The agent sends metrics (CPU, memory, disk, network, load) and system information (hostname, OS, kernel, architecture). From the agent's connection, we record the server's public IP address and may determine its city and country for the map. The agent does not read your files or application data.

Uptime monitors store the result of every check: status, response time and error message.

Notification channels and status pages

Bot tokens, webhook URLs and other channel secrets are stored encrypted. Email addresses that receive notifications are stored when they are added. Addresses outside the workspace members are only used after the recipient confirms them. Status page content you publish is visible to anyone.

How long data is kept

• Raw metrics: 7 days. Per-minute aggregates: 30 days. Hourly aggregates: 365 days.
• Raw monitor check results: 30 days. Hourly aggregates: 90 days. Daily aggregates: 400 days.
• Expired one-time tokens (email verification, password reset, agent enrollment) are cleaned up daily.
• Account, workspace and audit log data is kept for as long as the account or workspace exists.

Deleting data

Deleting a server in the dashboard immediately deletes its raw metrics. That server's per-minute and hourly aggregates are no longer shown and are removed when their retention ends (30 and 365 days).

Deleting a monitor immediately deletes its raw check results. Its hourly and daily aggregates are removed after 90 and 400 days.

Rules, channels, status pages, invites and members can also be deleted from the dashboard.

Deleting an account or a whole workspace is not yet available as a button in the app. The service operator does this on request; send your request from your account's email address to the contact below. That workspace's metric and check aggregates are removed when their retention ends.

Cookies

Sys Agent uses the sysagent_session cookie to keep you signed in, the sysagent_lang cookie to remember your language, and the sysagent_oauth cookie, valid for 10 minutes, while you sign in with Google or GitHub. The sysagent_device cookie (valid for 1 year) marks a browser that has signed in successfully, so you can still sign in while someone else is deliberately guessing your password. Your theme choice is stored in your browser. There are no advertising or third-party tracking cookies.

Other parties

We do not sell your data. Data only leaves Sys Agent to run features you set up, such as email through an SMTP server or notifications to the Telegram, Discord, Slack and webhook channels you connect.

Contact

For questions, data requests, or requests to delete an account or workspace, email noreply@dahlah.my.id.