Skip to content

Privacy policy

Last updated: September 2026. This is a plain-language summary of how SIP Sentry handles data; it will be reviewed by counsel before general availability.

Who we are

SIP Sentry (“we”) provides external monitoring for SIP and telephony infrastructure. We are based in the Netherlands and process personal data under the GDPR. Contact: hello@sipsentry.net.

What we store

  • Account data — your name and email address. SIP Sentry has no passwords: you sign in with a single-use link sent to your email address, or with a passkey. For a passkey we store its public key and metadata; the private key never leaves your device.
  • Organization data — organization name, team membership and roles, customer group names you create.
  • Monitoring configuration — targets (hostnames, IPs, domains), check settings, and alert destinations you configure. SIP credentials for REGISTER and RTP checks, and alert channel secrets (webhook signing secrets, Slack webhook URLs, Telegram bot tokens, SMS gateway keys), are encrypted at rest (AES-256-GCM) and are never returned by any API.
  • Check results — timestamps, response codes, latency, certificate metadata, DNS records, RTP measurements (jitter, loss, delay, estimated MOS), and a trace of the SIP messages each check sent and received. No call audio is recorded or stored anywhere in the system.
  • Billing data — handled by Stripe. We store your plan and subscription state; card details never touch our servers.
  • Operational logs — IP address and user agent for sessions, kept for security purposes.

What we don’t do

We don’t sell data, we don’t run third-party advertising or tracking on the product or this website, and we don’t use your monitoring data for anything except showing it to you and alerting you.

Retention

Check results are kept for at most 90 days on every plan, then deleted by a scheduled job. Incident records and the log of alerts we sent are kept while the account exists. Account data is deleted within 30 days of account deletion. Invoices are retained as required by Dutch tax law.

Processors

We use a small set of processors (hosting in the EU, Stripe for payments, an email delivery provider). A full processor list is available on request.

Your rights

Under the GDPR you can request access, correction, export, or deletion of your personal data at any time: hello@sipsentry.net. You can also lodge a complaint with the Autoriteit Persoonsgegevens.