This policy explains how SysOps 24/7(“we”, “us”) handles personal data when you use SysOps 24/7(the “Service”), including our website, web app and mobile apps. We are the controller of the personal data described here. Questions? Email support@sysops247.com.
What we collect
- Account details — your name, email address and organisation name. Your password is stored only as a one-way hash; we can never read it. If you sign in with Google or Apple we receive your account identifier, email address and (from Google) your name.
- What you ask us to monitor — monitor names, the URLs, hosts and repositories you watch, and their settings, including any request headers you add. Notification settings (such as Slack, Telegram or webhook details and SMTP credentials) are encrypted at rest.
- Monitoring results— uptime, response times, certificate details and alert history for your monitors. For GitHub Actions monitors we receive each run's outcome, repository, workflow, branch, commit and the GitHub username that triggered it.
- Billing — your plan, credit balance and payment-provider customer reference. Card details go directly to Stripe; we never see or store your full card number.
- Mobile push — if you enable notifications in our app, a device push token so we can deliver alerts to that device.
- Security and usage records — the IP address and browser or app details used to sign in, and a log of significant account actions, which we keep to protect your account and investigate abuse.
How we use it, and our legal basis
- To provide the Service (performance of our contract with you): running your monitors, sending your alerts, publishing status pages you choose to make public, and processing payments.
- To keep it secure and working (our legitimate interests): preventing fraud and abuse, rate-limiting, debugging and capacity planning.
- To send account email (contract): alerts you configure, password resets and receipts. We do not send marketing email without your consent.
- To meet legal obligations: for example, keeping billing records for tax purposes.
Optional AI features summarise alerts and diagnose failing monitors by processing the relevant monitor and alert details with a language model. We do not use your data to train AI models, and we do not sell your personal data.
Who we share it with
We share personal data only with service providers that help us run the Service, and only as needed:
- Stripe — payment processing, invoices and the billing portal.
- Google and Apple — only if you choose to sign in with them; Apple also delivers push notifications to iOS devices.
- Our email delivery provider — to send alerts, password resets and other account email.
- Our hosting and infrastructure providers — to store and process data on our behalf.
When you connect a notification channel (Slack, Telegram, Discord, Microsoft Teams, email or a webhook), we send alert details to that service at your direction; its own privacy policy then applies. Anything you put on a public status page is visible to anyone. We may also disclose data where the law requires it.
Some providers process data outside the UK. Where they do, the transfer is protected by an adequacy decision or standard contractual clauses.
Cookies and local storage
We use only what the Service needs to work: your browser's local storage keeps you signed in and remembers your theme and language, and a secure, HTTP-only cookie authorises access to the monitoring console. We use no advertising or analytics cookies and do not track you across other sites, so there is no cookie banner to accept.
How long we keep it
- Account and monitor data: for as long as your account exists.
- Monitoring metrics: a rolling window (30 days by default), after which they expire automatically.
- When you delete your account, your organisation, users, monitors, notification settings, API keys, devices and activity log are erased from our live systems immediately. Copies in backups expire on their normal rotation.
- Invoices and payment records are retained by Stripe and by us for as long as tax law requires, even after you delete your account.
Your rights
Under UK and EU data-protection law you can ask to access, correct, export or erase your personal data, and to restrict or object to how we use it. You can delete your account yourself at any time from the Account page in the app. For anything else, email support@sysops247.comand we will respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data-protection authority.
Security
Traffic to the Service is encrypted in transit, passwords are hashed, and notification secrets are encrypted at rest. Access to production systems is restricted to staff who need it. No system is perfectly secure, but we will notify you and the regulator without undue delay if a breach affects your data.
Children
The Service is for businesses and professionals and is not directed at anyone under 16.
Changes to this policy
If we change this policy materially we will update the date above and, for significant changes, tell you by email or in the app before they take effect. See also our Terms of Service.