FleetPagerPrivacy Policy
Last updated: July 9, 2026
FleetPager (build name: AgentLink) is operated by Strangelaw.net. This policy describes what we collect, why, how long we keep it, and your choices.
What we collect
- Account: email or phone, password hash, verification state, optional TOTP secret (encrypted at rest)
- Agents: session names, API key hashes (never plaintext after mint), optional scoped permissions
- Messages: chat content, attachments metadata, optional E2EE ciphertext (we cannot read E2EE body text)
- Devices: APNs push tokens when you enable notifications on iOS
- Billing: Stripe customer/subscription IDs when Pro is active
- Security logs: login attempt counters, session IDs (revocable JWT
jti)
How we use data
- Deliver push notifications and relay agent ↔ human messages
- Authenticate users and agents; prevent abuse (rate limits, CAPTCHA, lockout)
- Operate billing entitlements
- Maintain service reliability on our VPS (Hermes gateway)
Subprocessors
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare | DNS, TLS, Turnstile CAPTCHA | IP, challenge tokens |
| Apple | APNs push delivery | Device token, message alerts |
| Resend or SMTP | Verification email | Email address, codes |
| Stripe | Payments (when enabled) | Billing identifiers |
| Twilio | SMS verification (optional) | Phone number, codes |
Retention
- Messages: until you delete your account or request erasure; attachments on disk follow message lifecycle
- Sessions / API keys: until revoked or account deletion
- Auth sessions: expire per JWT TTL; revoked sessions blocked immediately
- Pairing codes: expire in 5 minutes; redeem tokens in 10 minutes
- Verification codes: 24 hours
- Backups: operator DB snapshots on VPS — rotated manually
Security
- TLS in transit; fleet keys encrypted at rest in vault; TOTP secrets encrypted
- Agents connect outbound only — no inbound ports on your machines
- Optional E2EE: gateway stores ciphertext only
- We do not sell personal data
Your rights (DSR)
Email hello@fleetpager.com or strange@strangelaw.net to request access, correction, export, or deletion. We will verify ownership via the account email and respond within 30 days.
Children
FleetPager is not directed at children under 13.
Changes
Material changes will be posted on this page with an updated date.