Privacy policy
Last updated: 5 July 2026
1. Who we are
Canopyd is a trading name of A&A Technologies Ltd, a company registered in England and Wales under company number 17315555, with its registered office at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE ("Canopyd", "we", "us").
For personal data relating to your account and your use of our website, we are the data controller. For infrastructure telemetry that your organisation sends to the platform, your organisation is the controller and we act as its processor.
You can contact us about anything in this policy at info@canopyd.com.
2. The data we collect
Account data
- Name, email address and username.
- A cryptographic hash of your password (we never store the password itself).
- Your role and the company your account belongs to.
Infrastructure telemetry
The Canopyd agent, installed by your organisation on its own servers, reports operational metrics: hostnames, operating-system information, CPU/memory/disk/network utilisation, uptime, and the names and running states of system services. For Wake-on-LAN, your organisation may also store device names, MAC addresses and IP addresses of its own equipment. This data describes machines, not people, but hostnames or device names can occasionally identify an individual (for example a workstation named after its user) — we treat it with the same care either way. The agent does not collect file contents, documents, keystrokes or screenshots.
Usage and security logs
- Sign-in events, including timestamps and IP addresses.
- Administrative actions (for example enrolling a server or changing a user's role).
- Standard web server logs.
Correspondence
- Anything you send us by email — support queries, security reports, general enquiries.
3. Why we process it, and our lawful bases
| Purpose | Data used | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Providing the monitoring service, including authentication and dashboards | Account data, telemetry | Performance of a contract |
| Securing the platform — detecting misuse, investigating incidents, audit trails | Usage and security logs | Legitimate interests (keeping the service and our customers safe) |
| Responding to support and other enquiries | Correspondence, account data | Performance of a contract / legitimate interests |
| Meeting legal and accounting obligations | Account and billing records | Legal obligation |
We do not use your data for advertising, we do not profile you, and we never sell personal data.
4. Where your data is stored
All Canopyd data is stored and processed on Microsoft Azure in the UK South region, in the United Kingdom. We do not transfer personal data outside the UK. Our security & data residency page describes the technical measures in detail.
5. Who we share it with
We share personal data only with the sub-processors needed to run the service:
| Sub-processor | Purpose | Location |
|---|---|---|
| Microsoft Azure | Cloud hosting, databases, backups | UK South (United Kingdom) |
Beyond that, we disclose personal data only where the law requires it (for example a court order), or with your explicit consent.
6. How long we keep it
- Account data — for the life of your organisation's contract, then deleted within 30 days of termination.
- Telemetry — the platform holds the latest snapshot per server; historical metrics, where enabled, are retained for 90 days.
- Security and access logs — up to 12 months.
- Correspondence — as long as needed to deal with your enquiry and for a reasonable period after.
Database backups age out on a rolling schedule of up to 35 days, so deleted data is gone from backups within 35 days of being deleted from the platform.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten") in certain circumstances.
- Restrict or object to processing based on legitimate interests.
- Port your data — receive it in a structured, machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email info@canopyd.com. We respond within one month. If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Cookies
We use only the essential cookies needed to sign you in and keep the service secure — no analytics, no advertising, no tracking. The full list is in our cookie policy.
9. Children
Canopyd is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18.
10. Changes to this policy
If we make material changes we'll update this page and the date at the top, and where the change significantly affects you we'll notify account holders by email before it takes effect.
11. Contact
A&A Technologies Ltd (trading as Canopyd)
Suite A, 82 James Carter Road
Mildenhall, IP28 7DE
info@canopyd.com