Effective date: 2026-01-01. This RMM instance is operated by SiteKings for its customers' IT-management needs. This page describes what we collect on managed endpoints and how we use it.

What we collect

• Hardware + OS inventory (CPU, RAM, disk, OS version, BIOS)
• Installed application inventory
• Local user account list + last-logon timestamps
• Network configuration (LAN IP, gateway, DNS, NIC vendor)
• Remote-desktop screen captures, on-demand, when an authorized technician initiates an RD session — these are recorded for the duration of the session
• Operator-issued command output
• BitLocker recovery keys (encrypted at rest with Fernet)
• Restic backup snapshots of approved folders

What we do NOT collect

• Continuous keyboard / clipboard contents
• Browser history, cookies, or saved passwords from the end-user's browser profile
• Personal files outside of explicitly-configured backup paths
• Webcam or microphone audio

Where it's stored

All data is stored on infrastructure operated by SiteKings on behalf of the customer. Encrypted secrets (BitLocker keys, password vault entries, backup encryption keys) are protected with a Fernet key held server-side.

Retention

Inventory rows are retained as long as the machine remains active. Remote-desktop session recordings are retained for 30 days unless extended by an operator. Audit logs are retained for 1 year. Soft-deleted user / machine rows can be purged on customer request.

Contact

For data requests or questions, contact your administrator.