Privacy policy

Last updated 2 October 2026

The controller of your personal data is SudoWhizzy Lda, Portugal (hello@sudowhizzy.com). We process it to provide the service you signed up for and to meet our legal obligations, such as keeping invoices.

What we keep

• Your account: email address, name if you sign in with Google, and sign-in sessions.
• Billing: handled by Stripe. We keep your Stripe customer id and plan, not your card details.
• Servers: name, hostname, the facts the agent reports (operating system, memory, disk, running services) and when it last checked in.
• Support: tickets you send, and AI Support chats (kept 90 days and sent to Anthropic, which runs the AI, to answer them).
• Activity: every tool call your AI makes through SudoWhizzy, with its arguments and result (including command output and files it read), so you can see what happened. The log keeps only the length of files it writes; an approval request keeps the full content so you can check it.

Cookies and analytics

The site uses Google Analytics to see which pages are useful. Its cookies are only set if you choose Accept in the cookie notice; if you decline, Google receives only anonymous signals without cookies. You can change your mind by clearing this site's data in your browser. Signing in uses one necessary cookie for your session.

What we do not keep

No SSH keys or server passwords. Your conversations with your AI stay with your AI provider; we only see the tool calls it sends us.

Who else sees it

Stripe (payments), Anthropic (AI Support answers), Google (email for sign-in and alerts, Google sign-in if you use it, and Analytics if you accept it) and our hosting provider (Hetzner, in Germany). We do not sell data or use it for advertising.

How long

Your activity, approvals and alerts are shown to you for 90 days. After 90 days we delete the output of each tool call and keep only what was asked, when and from which address, as a record of the service; that record and your sign-in history are deleted after 2 years. A server you remove from your list is hidden from you but stays in that record. Deleting your account deletes your servers, activity and approvals. Billing records are kept as tax law requires. On your servers, the agent deletes background job output and database dumps it made after 7 days.

Your rights

You can ask for a copy of your data, a correction or deletion at hello@sudowhizzy.com. You can also complain to the Portuguese data protection authority (CNPD) or the one where you live.