Privacy Policy
Last updated 21 October 2026
- We collect what Argus needs to work: your account details, and the metrics, logs and changes your servers send.
- No advertising, no tracking cookies, no third-party analytics. We never sell your data.
- Download everything, or delete your account and workspace, from your account page at any time.
1. Who we are
Argus is a server monitoring service operated by an individual developer based in India (“we”, “us”). For anything about this policy or your data, write to us through the support form and choose “Privacy or my data”.
For your account data we decide how it is used (we are the “controller”). For the telemetry your servers send (metrics, logs, changes) you decide what is collected and we process it only to run Argus for you (we are your “processor”).
2. What we collect
| Data | What exactly | Why |
|---|---|---|
| Account | Email address, password (stored only as a bcrypt hash), workspace name, role, email preferences, when you signed up and last signed in. | To sign you in, run your workspace and send the email you asked for. |
| Sessions and security | For each signed-in browser or phone: IP address, browser or app name, start and expiry time. An audit log of actions taken in your workspace. | To keep accounts secure, show you where you're signed in, and investigate abuse. |
| Phone app | Device name, app version and a push token from Google Firebase. | To deliver incident alerts to your phone. |
| Server telemetry | Host name, host ID, operating system and architecture; CPU, memory, disk, network and load metrics; log lines from /var/log/syslog, /var/log/messages, /var/log/*.log and the system journal; change events (package installs, service starts and stops, reboots, deploys you send, and the paths and fingerprints of configuration files you choose to watch, never their contents). | This is the service: dashboards, alerts, log search and the change timeline. |
| Product events | First-party records such as “sign-up page viewed”, “account created”, “first server connected”, linked to your account but without IP address or browser details. | To see where people get stuck while setting up, and fix it. |
| Support messages | Your email address and what you write to us. | To answer you. |
| Email delivery | Which alert went to which address, and whether delivery succeeded. If your mail provider reports a hard bounce or a spam complaint, we note it and stop emailing that address. | Reliable alerts, and a good sending reputation. |
Logs can contain personal data about the people who use your systems (for example IP addresses or user names in web server logs). You choose which servers run the agent, and you are responsible for having a lawful basis to send those logs to Argus. Don't point the agent at logs you're not allowed to share.
Cookies: one cookie keeps you signed in. Your theme choice is stored in your browser. That's all.
3. How we use it, and why that's allowed
- To provide Argus (contract): sign-in, monitoring, alerts, log search, the phone app.
- Security and abuse prevention (legitimate interest): rate limits, the audit log, session records.
- Account email (contract): confirming your address, password resets, incident alerts you switched on.
- Product email (your choice): a setup reminder and a weekly summary. Every one has a one-click unsubscribe, and you can turn them off on your account page.
- Improving Argus (legitimate interest): counting product events in aggregate.
We don't use your data for advertising, we don't sell it, and we don't use your telemetry to train AI models.
4. Where it's stored, and who helps us
- Hosting: the Argus servers and databases run on a server in Germany.
- Backups: encrypted before upload and stored with Amazon Web Services in Frankfurt, Germany.
- Email: sent through Amazon Simple Email Service (Mumbai, India region). Amazon sees the recipient address and the message.
- Phone push: Google Firebase Cloud Messaging delivers the wake-up signal to the Android app. Incident details are fetched by the app directly from Argus.
These providers process data only on our instructions. Using them means data moves between India, the EU and those providers' networks; we rely on their standard contractual protections for those transfers.
5. How long we keep it
| Data | Kept for |
|---|---|
| Metrics | 90 days, then deleted automatically |
| Log lines | 15 days, then deleted automatically |
| Account, changes, incidents, audit log | While your account or workspace exists |
| Sessions | Until you sign out or the session expires |
| Encrypted backups (disaster recovery only) | Daily backups 35 days; monthly backups 365 days |
6. Your rights and controls
- See and download your data: “Download my data” on your account page gives you a JSON file with your account, and for owners and admins the workspace's servers, changes, incidents, rules and audit log.
- Delete: “Delete my account” on the same page. If you're the only owner, the workspace goes with it: its servers are disconnected at once, its database records are deleted immediately, and its metrics and logs within minutes. Copies in encrypted backups expire on the schedule above and are never used except to recover from a disaster.
- Correct: change your password, preferences and workspace name on your account page, or ask us through support.
- Object or withdraw consent: unsubscribe from product email at any time; ask us to stop any other processing.
- Complain: you can complain to your data protection authority. In India that is the Data Protection Board of India; in the EU, your national supervisory authority. Please tell us first so we can fix it.
We answer requests within 30 days, usually much sooner. We may ask you to confirm the request from your account's email address.
7. Security
All connections use TLS. Each server's agent has its own certificate and connects outward only; nothing on your server listens for us. Passwords are hashed with bcrypt, sign-in is rate-limited, backups are encrypted and locked against deletion, and restores are tested every week. If a breach affects your data, we'll tell you without undue delay.
8. Children
Argus is a tool for professionals and is not meant for anyone under 18.
9. Changes
If we change this policy in a way that matters, we'll email account owners before it takes effect. The date at the top shows the latest version.