Privacy policy

1. Who is responsible

The service is operated by Inuksuk. For any question about your data, write to contact@inuksuk.io.

2. What we never see

We do not see what happens during a remote session. The screen, the keystrokes and the mouse movements travel directly between the technician and the client computer, encrypted end to end. Our relay pairs the two connections and forwards bytes it cannot read; it holds no key allowing it to.

We store no screen recording, no screenshot and no keystroke. Nothing of the kind is ever written to disk on our servers.

3. Technician account

Collected because the service cannot work without it: name, email address, password (stored hashed, never in clear text), account status and creation date. Kept while the account exists.

4. Computers and sessions

For each computer registered by a technician: the name given to it, the Windows user name, the operating system version, the agent version, the public IP address it connects from, and the date it was last seen. Plus, for each support session: who, which computer, when it started and ended.

This is what lets a technician find their computers and prove what was done. It belongs to the technician's account; no other technician sees it.

A one-off assistance identity is deliberately ephemeral: it is drawn anew each time the client runs the program, and forgotten by the server two hours after the last sign of life.

5. Payments

Card details never reach our servers: payment goes through Stripe's own hosted page. We keep only the amount, the currency, the date, the status and Stripe's transaction reference — what an invoice requires.

6. Error reports

When the program crashes, it sends the technical trace, the product and version, the machine name, the Windows user name and the operating system version. This is used to fix the fault, nothing else.

7. Audit log

Sign-ins, sessions opened, administrative actions and failed sign-in attempts are recorded with a date and an IP address. This is what makes an abuse traceable — including for you, if your account were used without your knowledge.

8. Emails

Invitations are sent to the address the technician provides. That address is kept in the technician's account so the link can be sent again. We send no advertising and share no address.

9. Cookies

One cookie, strictly technical: the one that keeps you signed in. No advertising cookie, no analytics, no third-party tracker.

10. Who else receives data

Only Stripe, for payments. No advertising provider, no data broker, no analytics service. Servers are hosted at OVH.

11. Retention

Account data while the account exists; payments for the legally required accounting period; audit logs and error reports as long as they are useful for security and support. Ephemeral assistance identities: two hours.

12. Your rights

Write to contact@inuksuk.io to access, correct, export or delete your data, or to close your account. We answer within thirty days.

13. Breach

Should a breach affect your data, account holders are informed, along with the competent authorities where the law requires it.