Your data: ownership & deletion

Your operational data belongs to you. Demerzel’s job is to make sense of it, not to hold it hostage.

Immutable, replayable evidence

Everything the agent reports is stored as append-only evidence — records are never rewritten in place. The meaning you see (health, alerts, inventory) is derived from that evidence and can be recomputed from it. This makes history trustworthy: what was reported is always what’s there, and tampering would be evident rather than silent.

Real deletion

You are never locked in. An owner can delete an organization at any time, confirming by typing its name. Deletion is not a soft flag — it permanently removes that organization’s data (servers, metrics, domains, certificates, alerts, channels, members and its activity log) in a single transaction.

Your user account is separate from any one organization: deleting an organization you belonged to does not delete your account, and any other organizations you’re part of are untouched. If that was your only organization, you’re simply free to start a new one.

A permanent deletion record

Because a deletion needs to be auditable after the data is gone, Demerzel writes a separate, permanent record of every organization deletion — the organization name, who requested it, the owner at the time, the member count, the request IP and user agent, and the date. This record deliberately outlives the deleted data, so the act is always accountable.

What we don’t do

• We don’t sell your data.
• We don’t use it to build a product for someone else.
• The agent doesn’t collect your secrets in the first place — see Data privacy & scope.

Compliance & data residency

Your data is hosted in Canada (OVHcloud, Beauharnois) with no third-party sub-processors for your monitoring data. For hosting details, infrastructure certifications and a data-processing agreement, see Data residency & compliance.