Privacy Policy

Last updated: December 2024

This Privacy Policy explains how Hyprwatch collects, uses, and protects your information when you use our fleet management service.

1. Information We Collect

Account Information

When you sign up for Hyprwatch, we collect:

• Email address (for authentication and communication)
• Organization name
• Optional: Company name, fleet size (from beta request form)

Host Telemetry Data

When you install the Shadow agent on your hosts, we collect system information via osquery, including but not limited to:

• Hostname and system identifiers
• Operating system and version
• Hardware information (CPU, memory)
• Installed software and packages
• Running processes
• Network configuration
• Results from queries you execute

You control what data is collected through the queries you configure and run.

Usage Data

We collect basic usage data:

• Login timestamps
• API requests (for rate limiting)
• Query execution history

2. How We Use Your Information

We use your information solely to:

• Provide and operate the Hyprwatch service
• Authenticate you and secure your account
• Display your fleet data in the dashboard
• Send service-related communications (e.g., magic link emails)
• Improve the service (aggregated, anonymized data only)

3. What We Don't Do

We do not:

• Sell your data to third parties
• Share your data with advertisers
• Use your host data for any purpose other than providing the service to you
• Access your hosts directly (the agent only sends data outbound)

4. Data Storage and Security

• Database: Your data is stored in a PostgreSQL database
• Encryption: All data is transmitted over HTTPS/TLS
• Authentication: We use secure, passwordless magic link authentication
• API Keys: API keys are hashed before storage

While we implement reasonable security measures, no system is 100% secure. See our Terms of Service for liability limitations.

5. Data Retention

• Account data is retained while your account is active
• Query results are retained based on your configuration
• You may request deletion of your account and data at any time

6. Your Rights

You have the right to:

• Access: View all data we have about you
• Delete: Request deletion of your account and data
• Export: Export your data via the API
• Uninstall: Remove the Shadow agent from your hosts at any time

7. Third-Party Services

Hyprwatch uses the following third-party services:

• Email: Resend (for sending magic link emails)
• Database: Neon PostgreSQL (data storage)

8. Cookies

We use essential cookies only for session management and authentication. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the service.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, please contact us through the Hyprwatch platform.

---

This is a hobby project. We keep things simple and respect your privacy.