Privacy policy

Last updated: July 2026. This is a plain-language summary of how SIP Sentry handles data; it will be reviewed by counsel before general availability.

Who we are

SIP Sentry (“we”) provides external monitoring for SIP and telephony infrastructure. We are based in the Netherlands and process personal data under the GDPR. Contact: hello@sipsentry.io.

What we store

• Account data — your name, email address, and password hash (argon2id). We never store plaintext passwords.
• Organization data — organization name, team membership, customer group names you create.
• Monitoring configuration — targets (hostnames, IPs, domains), check settings, and alert destinations you configure. Credentials for REGISTER checks are encrypted at rest (AES-256-GCM) and are never returned by any API.
• Check results — protocol metadata only: timestamps, response codes, latency, certificate metadata, DNS records. There is no call content or audio anywhere in the system.
• Billing data — handled by Stripe. We store your plan and subscription state; card details never touch our servers.
• Operational logs — IP address and user agent for sessions, kept for security purposes.

What we don’t do

We don’t sell data, we don’t run third-party advertising or tracking on the product or this website, and we don’t use your monitoring data for anything except showing it to you and alerting you.

Retention

Check results are retained per your plan (30–90 days), then deleted by scheduled jobs. Account data is deleted within 30 days of account deletion. Invoices are retained as required by Dutch tax law.

Processors

We use a small set of processors (hosting in the EU, Stripe for payments, an email delivery provider). A full processor list is available on request.

Your rights

Under the GDPR you can request access, correction, export, or deletion of your personal data at any time: hello@sipsentry.io. You can also lodge a complaint with the Autoriteit Persoonsgegevens.