Data & Privacy
What we collect
Server metrics (if you install the agent)
| Data | Purpose | Retention |
|---|---|---|
| CPU, RAM, disk, network metrics | Monitoring and alerting | 90 days (Pro) |
| Process list (name, PID, CPU%, RAM%) | AI diagnostics | 72 hours |
| System info (OS, kernel, hostname) | Resource inventory | Duration of account |
| Public IP address | Asset mapping | Duration of account |
We never collect:
- File contents
- Database contents
- Application logs
- Network payload data (only throughput stats)
- Credentials or secrets
HTTP monitors
| Data | Purpose | Retention |
|---|---|---|
| URL being monitored | Check target | Duration of account |
| HTTP status code | Uptime tracking | 90 days |
| Response time | Performance tracking | 90 days |
| Response body (for keyword checks) | Keyword matching | Not stored — evaluated in memory only |
| SSL certificate metadata | SSL grading | 90 days |
Account data
- Email address — account identification, notifications
- Payment information — handled by Stripe, never stored on SecureCheap servers
- API credentials for integrations — encrypted with AES-256 at rest
Where data is stored
| Component | Provider | Location |
|---|---|---|
| Primary database | Self-hosted PostgreSQL | Germany (EU-Central) |
| Time-series metrics | Self-hosted TimescaleDB | Germany (EU-Central) |
| Object storage (reports) | Hetzner Storage Box | Germany (EU-Central) |
| Payment processing | Stripe | PCI DSS Level 1 |
All data is stored in the EU. No data is transferred to US-based third parties without explicit consent.
GDPR compliance
SecureCheap is operated by a company registered in the EU. Under GDPR, you have the right to:
- Access — Request a copy of all data we hold about you
- Rectification — Correct inaccurate personal data
- Erasure — Request deletion of your account and all associated data
- Portability — Export your data in machine-readable format (JSON)
- Restriction — Restrict processing of your data
To exercise these rights, email [email protected].
Data deletion requests are processed within 30 days. All backups are purged within 90 days.