Privacy Policy

What we collect

We collect two kinds of data, and treat them differently:

• Account data: your name, username, email, organization, billing details and how you use the dashboard. When you sign up, a hash of a fingerprint of your browser together with the address you signed up from, used only to stop one person from opening several free accounts, kept until a month after the account is deleted.
• Telemetry from your apps: for sampled requests, the method, the path without its query, the client IP (cut to its network when your organization turns on "Cut client addresses"), the user agent, the rule that decided, the response status and timings.

What we do not collect

Agents never send request bodies, query values, cookies, authorization headers or passwords: none of those values leave your process, so there is nothing to mask.

How we use it

To run the service, show you your traffic, propose rules, detect false positives, bill you and keep the platform secure. We do not sell personal data and we do not use your telemetry to train models that serve other customers.

Retention

Telemetry is kept for the history of your plan (7, 30 or 90 days, or a custom period on Enterprise) and then deleted. Account data is kept while your account exists and for up to 6 months after deletion, except invoices, which tax law requires us to keep for 5 years.

Sharing

We share data only with the subprocessors listed on the Subprocessors page, under contracts that bind them to the same obligations, or when a valid legal order requires it.

Your rights

You can access, correct or delete your data from Profile and Settings, or ask for a copy by writing to [email protected]. If you are in Brazil, see the LGPD page for the rights guaranteed by Law 13,709/2018.