Privacy policy

1. Introduction

TunnelHQ ("we", "our", or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our monitoring platform and related services.

2. Information we collect

We may collect the following types of information:

• Account information: username, email address, and password (stored in hashed form).
• Monitoring data: configuration and status data for the servers and endpoints you add to the Service, including encrypted credentials where you use credential storage (AES-256-GCM at rest).
• Usage data: how you use the Service, such as feature usage and general analytics to improve the product.
• Technical data: IP address, browser type, and device information for security and support.
• AI assistant connections: when you connect an AI assistant to TunnelHQ, the details of that connection. See section 5.

3. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate you and manage your account.
• Run monitoring checks and store results and incident history.
• Send you alerts and notifications you configure.
• Respond to support requests and improve the Service.
• Comply with legal obligations and enforce our terms.

4. Data storage and security

We implement appropriate technical and organizational measures to protect your data. Sensitive credentials you store in the Service are encrypted with AES-256-GCM using a server-side key. We do not sell your personal information to third parties.

5. AI assistants

You can connect an AI assistant, such as Claude, ChatGPT, Cursor, or VS Code, to TunnelHQ through our hosted MCP server at https://mcp.tunnelhq.com/mcp. The assistant signs in as you, and you choose what it can reach.

What we store for each connection:

• Who connected it.
• The workspace it belongs to, and the project, or all projects, it can reach.
• Its access level: read only, or read and write.
• The assistant's name and the sign-in address it registered with.
• When the connection was created and when it was last used.

We store the connection's access and refresh tokens only as one-way SHA-256 hashes, never the tokens themselves.

What we receive from the assistant: not your conversation. We only receive the actions the assistant asks for, such as listing your monitors or adding a check with its address. Each is handled exactly as the same action in the dashboard or the API, and is saved only when the action itself saves something, such as a new monitor or check. Like any API request, the MCP server passes the caller's IP address to our API so we can apply rate limits.

How long a connection lasts: it ends after 90 days without use. Revoking it under Developers → AI assistants ends it immediately and deletes its record. A connection also ends if one of its refresh tokens is used twice.

Who else sees it: we don't share connection data with anyone. Results the assistant asks for are sent to that assistant, and from then on are covered by its provider's privacy policy, for example Anthropic's or OpenAI's. Checks run on TunnelHQ's own servers.

6. Data sharing and disclosure

We may share your information only: (a) with service providers who assist us in operating the Service, under strict confidentiality; (b) when required by law or to protect our rights and safety; or (c) in connection with a merger, sale, or transfer of assets, with notice where required.

These service providers receive personal data from us:

• Hetzner: hosts our servers and their backups.
• An email delivery provider: delivers our emails, such as sign-in, invitation, and alert emails.
• Stripe: processes payments and keeps invoices and payment records.
• PostHog (EU cloud, Frankfurt): analytics for our website and the app. On the website it records page views, clicks, page performance, and session replays with everything you type masked. In the app it is tied to a numeric user ID, with no session recordings and no automatic capture of what you type or click. When you sign up, your earlier visits to the website are linked to your account.
• Google (Gemini API): only when you use AI import in the app. The text you paste is sent to Google's Gemini API to read the configuration in it.
• Cloudflare: serves our marketing website. It does not sit in front of the app.

The configurations you test, including on the free tester, are sent only to our own checker servers.

7. Data retention

• Check history: results, daily summaries, VPN test logs, webhook delivery logs, and API usage records are deleted automatically after 365 days. Finer-grained records go sooner: individual check results after a day (except each monitor's latest 100 results and every status change), per-minute summaries after 24 hours, and hourly summaries after 30 days. Your plan sets how far back you can view your history.
• Incident history: kept until you delete the monitor or clear its incidents.
• Monitors: deleting a monitor immediately deletes it, its stored credentials, and its VPN test logs.
• Projects and workspaces: deleting one switches it off immediately. Its monitors stop, access is removed, its API keys stop working, and any paid subscription is cancelled. Its data is then removed on the schedule above, or sooner on request.
• Deleting your account: email support@tunnelhq.com and we will delete your account and its data, incident history included, within 30 days. Copies in backups expire on the backup schedule below.
• Backups: encrypted nightly. Database backups are kept for 14 days, a weekly copy of test logs for 28 days, and a change log for point-in-time recovery for 7 days.
• Free tester: we don't store the configuration you test. Each test writes one line, with the protocol, the host, your IP address, and your remaining rate limit, to server logs that are overwritten as they fill.
• Payments: Stripe keeps invoices and payment records under its own policy.
• AI assistant connections: they end after 90 days without use, or immediately when you revoke them (see section 5).

8. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing. You can manage much of your account and monitoring data from within the Service. For other requests, including deleting your account and its data, email support@tunnelhq.com.

9. Cookies and similar technologies

We use cookies and similar technologies for session management, authentication, and preferences. You can control cookie settings in your browser, though some features may not work correctly if you disable essential cookies.

Our website also uses PostHog analytics cookies. In the EU, the EEA, the UK, and Switzerland, they are set only after you accept them in the cookie banner; until then, or if you decline, visits are counted without cookies. Elsewhere, analytics are on unless your browser sends Global Privacy Control or Do Not Track.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service or by email where appropriate. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or our data practices, email support@tunnelhq.com.