Privacy policy

Last changed: 11 October 2026.

Who runs Suitaar

Suitaar is run by [name of the operator: set LEGAL_NAME]. Contact for privacy questions and deletion requests: [contact email: set LEGAL_EMAIL].

What we store

• Your account: from your Google login, the Google account ID, your email address, whether Google verified it, and your name. Your login sessions, with the browser name (user agent).
• Your team: the team, its members and their roles, and a log of changes (for example "source added").
• Alerts: what your tools send to Suitaar: the message, description, tags, details, alias, entity and source, and the raw request. These can contain personal data if your systems put it there. Do not send passwords or other secrets in alerts.
• Destinations: the Slack and Discord webhook URLs, encrypted.
• Heartbeats: their names and the times of their pings.
• Server logs: for each request, the time, the kind of page or API call (never the full address, because it can hold a secret), the answer status and the duration, to find errors. The proxy in front of the server can log IP addresses, for security.

Why

To give you the service that you asked for: receive your alerts and send them to your Slack and Discord channels (the contract with you). To keep Suitaar secure and stop abuse (our legitimate interest). We do not sell data, show ads or track you.

Where

The servers and the backups are at Hetzner Online GmbH in the European Union (Germany or Finland).

Who else processes data

• Hetzner: hosting and backups.
• Google: the login. Google sees that you log in to Suitaar (Google's own privacy policy applies).
• Slack and Discord: receive the alerts that you send to your own webhooks. You choose these recipients.
• Sentry (Functional Software, Inc.), in its EU data region (Germany): reports of server errors and the timing of a sample of requests, to find and fix problems. A report holds the kind of page or API call, the error text and a request id: never the full address, the content of a request, your name, your email or your IP address. Sentry also receives the warning and error lines of the server logs (no information lines), with the same content rules, and keeps them for 30 days.

How long

• Alerts: 180 days after their last event on the free plan. Raw requests: 30 days. Expired login sessions: deleted.
• Server logs: at most 14 days on our server. Warning and error lines also at Sentry: 30 days.
• Your account and team data: until you delete them.
• Backups: deleted data stays in the backups for at most 30 days.

Suitaar deletes old data automatically, every hour.

Delete your data

You can delete your account at any time on the Account page. A team where you are the only member is deleted with it, with all its alerts. In a team with other members, only your membership goes, and its alert history then shows "Deleted user". Messages that Suitaar already sent to Slack and Discord stay there: remove the webhooks in Slack and Discord if you no longer want them. You can also write to the contact above.

Cookies

Only cookies that the service needs: your login session (30 days), the state of a login with Google (10 minutes), and the message of a refused form (1 minute). No analytics, advertising or tracking cookies.

Your rights

You can ask for a copy of your data, a correction, deletion, or an export, and you can object to the processing. Write to the contact above. If you are not satisfied with our answer, you have the right to lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens).