Privacy Policy

1. Information we receive

Account information includes your sign-in email, user identifier, verification status, and available profile details. Organization information includes the company name, primary contact name, email and telephone number, business address, membership and access permissions, and records of terms acceptance.

When you connect an IBM i system, we receive the system identifiers, configuration, telemetry, events, and health information submitted by the agent or your users. Service infrastructure may also record technical information such as network addresses, request times, errors, and security events.

2. Google sign-in

If you choose Continue with Google, Google and Firebase Authentication provide information needed to authenticate you, including your Google account identifier, email address, verification status, and basic profile information such as your name and profile image when available. We use this information to sign you in, associate you with your ProtectMyi account, secure account access, and support your use of the service.

The current sign-in integration does not request access to your Gmail messages, Google Drive files, calendars, or contacts. We do not sell Google user data, use it for advertising or marketing, or use it to train general-purpose artificial intelligence or machine-learning models. Google sign-in information is processed through Firebase Authentication and is disclosed only as described in this policy.

3. Why we use information

We use information to operate the service, authenticate users, manage organizations and LPARs, display monitoring results, provide notifications, answer support requests, maintain security, and record agreements. We use your contact details for service communications, including pilot changes and notice of the pilot's eventual end.

We may review monitoring and technical data to diagnose problems, validate results, investigate incidents, improve reliability and performance, plan cloud capacity, and forecast data growth. We use aggregated or de-identified information where it is sufficient. Customer data and business contact details are not used for advertising, testimonials, sales targeting, or other marketing purposes, and we do not sell them.

4. Access and sharing

Information is available to authorized users according to their organization and role. If your organization is managed by an MSP, authorized users of that MSP may access the information made available through that management relationship. ProtectMyi personnel may access information when reasonably necessary for the service and technical purposes described above.

We use Google Cloud and Firebase to host and operate the service, including authentication, storage, and processing. These providers process information as needed to supply their services. We may disclose information when required by law or reasonably necessary to protect the service, investigate abuse, or defend legal rights. We do not share customer information with advertisers.

5. Ownership, storage, and location

You retain ownership of your Customer Data. We may reorganize records, change schemas, or migrate tables and storage systems to maintain and improve ProtectMyi, subject to our terms and applicable access controls.

Detailed IBM i telemetry is stored and processed in the Canadian or U.S. regional environment assigned to the LPAR. A separate shared control system stores account and organization details, LPAR identifiers, registration information, and current health data. A telemetry region selection therefore does not keep every category of account and service information exclusively in that country. Authentication providers and other infrastructure services may process account, service, and security information outside the selected telemetry country. Contact us before connecting a system if you require every category of data to remain exclusively in one country.

6. Browser storage and security

The portal uses browser storage to maintain authentication and remember preferences such as your theme and selected organization. You can clear this storage using your browser settings; doing so may sign you out or reset preferences.

We use reasonable technical and organizational safeguards appropriate to the pilot. Access controls restrict service data to authorized users. No service can guarantee absolute security. You are responsible for protecting your credentials and managing the users authorized by your organization.

7. Retention and your choices

We retain information as needed to provide and support the service, maintain security, and meet applicable legal and recordkeeping obligations. Retention may vary by data category. Deletion from active systems may not immediately remove copies in backups or records retained for those purposes.

You may stop using the service and request access to, correction, export, or deletion of your information by contacting support@protectmyi.org. We may verify your identity and authority to act for the organization before fulfilling a request. We respond in accordance with applicable law and explain any applicable retention or technical limits. Removing access through your Google account does not by itself delete records already held by ProtectMyi.

8. Policy changes

We will update this page when our data practices change and provide notice of material changes to existing customers. A new use outside the disclosed service and technical purposes will require a separate notice and any consent required by law.