ServerGuardAI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our macOS and iOS application ("App") and related services.
1. Information We Collect
1.1 Account Information
When you use ServerGuardAI, we authenticate you via your Apple ID through iCloud. We store a unique iCloud identifier to associate your servers and settings with your account. We do not collect your name, email address, or password.
1.2 Server Metrics
Our lightweight agent, installed on your Linux servers, collects performance metrics including:
- CPU, memory, disk, swap, and network usage
- Process lists and service status
- SSL certificate expiry information
- Log snippets (last 300 lines of configured logs)
- Server profile information (OS, hosting panel, firewall type)
- The username and IP address of each successful login to the server, so a login from somewhere new can be flagged
- When an alert fires, a snapshot of the running processes (including their command lines) and network listeners, to help explain it
- Nightly security checks: the paths, sizes and fingerprints (hashes) of website files, which detection rule matched, and plugin and theme names and versions. File contents are not uploaded
This data is transmitted to our API for storage and display within the App, and kept for the periods listed in section 7.
1.3 Device Information
We collect your device's push notification token and a unique device identifier to deliver push alerts. This information is stored securely and used solely for notification delivery via Apple Push Notification Service (APNs).
1.4 Usage Analytics (Optional)
With your explicit opt-in consent, we may collect anonymous usage analytics to improve the App. This may include feature usage patterns, app launch frequency, and crash reports. Analytics data is fully anonymised and cannot be linked back to you.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the ServerGuardAI service
- Display server metrics and dashboards within the App
- Send push notification alerts for server events
- Run AI diagnostics when you ask for one (available on every plan)
- Improve and optimise the App experience
- Provide customer support
3. AI-Powered Analysis
If you use our AI diagnostics feature (available on every plan), your server metrics, logs, and profile data may be sent to third-party AI providers (OpenAI or Anthropic) for analysis. This data is:
- Transmitted securely via encrypted connections
- Not used by AI providers for model training
- Not stored by AI providers beyond the duration of the request
- Log lines are scrubbed of email addresses, passwords, tokens and authorization headers when they reach our servers. IP addresses and hostnames are kept, because a diagnosis needs them
When you run an AI diagnosis from a device that holds the server's SSH login, the AI may ask to look at more detail. The app then runs read-only commands on your server over your own SSH login. It refuses any command that could change the server or read a password or key file, removes the passwords, keys and tokens it recognises from what the commands print, and sends that output to the AI provider so the diagnosis can continue. The commands and their output are kept with the diagnosis in your history, so you can always see what was checked.
4. Data Sharing and Third Parties
We do not sell, rent, or trade your personal information to third parties. We may share data only in the following circumstances:
- Service providers: Apple (APNs for push notifications), AI providers (for diagnostics, as described above), and cloud infrastructure providers for hosting
- Legal requirements: If required by law, regulation, or legal process
- Safety: To protect the rights, property, or safety of ServerGuardAI, our users, or the public
5. Data Storage and Security
Your data is stored on secure servers with industry-standard protections including:
- TLS/SSL encryption for all data in transit
- Encrypted storage for sensitive credentials (API keys, HMAC secrets)
- Rate limiting and access controls on all API endpoints
- Regular security reviews and updates
6. Cookies
The ServerGuardAI App does not use cookies. Our website (serverguardai.com) may use essential cookies for basic site functionality. We do not use advertising or tracking cookies.
7. Data Retention
- Server metrics: Detailed readings for 6 hours, 10-minute averages for 3 days, and hourly averages for 90 days, then deleted
- Alerts: Deleted 30 days after they were raised. A few alerts about a problem that is still ongoing (such as a paused server) stay until it is resolved
- Login records: Each username and IP address pair is deleted 90 days after it was last seen
- Alert snapshots: The process and network snapshot taken when an alert fires is deleted after 30 days
- Logs: Overwritten each collection cycle (approximately every 2 minutes); not accumulated
- Account data: Retained until you delete your account or request deletion
8. Your Rights
Depending on your jurisdiction (including under GDPR, CCPA, and similar regulations), you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Delete your personal data ("right to be forgotten")
- Restrict processing of your data
- Data portability: receive your data in a structured format
- Object to processing of your data
- Withdraw consent for optional analytics at any time
To exercise any of these rights, contact us at the address below.
9. Children's Privacy
ServerGuardAI is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
10. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, through in-app notifications. Continued use of the App after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us using the app or at:
Email: [email protected]
Website: serverguardai.com
Legal owner: SBM Development SRL