Privacy Policy
Last updated October 26, 2026
Draft: this document hasn't been reviewed by counsel yet and isn't in force. It describes how the service works today; the final version will replace it.
We collect what it takes to connect your devices and run your workspace, and nothing for advertising. The traffic between your devices is end-to-end encrypted; we can't read it.
This policy explains what Sukses360 Ltd ("we") collects when you use Underpass, our website and our apps, why, who we share it with, and the choices you have. When you use Underpass for an organization, that organization decides how its workspace is used, and our Data Processing Addendum covers the personal data we process for it.
What we collect
Your account
- Email address, and the name and profile picture from Google if you sign in with Google.
- The workspaces you belong to, your role in each, and invites you send or accept.
- Plan and billing details for workspaces on a paid plan, and anything you write in a plan request.
- Feedback and support messages you send us, including through the contact form on our website.
- API tokens you create: their name, what they can do and when they expire. We store only a hash of each token, never the token itself.
Your devices and network
To connect your devices, the coordination service keeps, for each device:
- Its name, hostname, operating system, app version and the owner's email.
- Its WireGuard public keys, its private-network address, and the IP addresses and ports it can be reached on (public and local), so other devices can connect to it.
- When it was last online, and connection health: whether it reaches each peer directly or through the relay, latency and data volume.
- If you use those features: the ports it listens on and the name of the program behind each (service discovery), the subnets it offers to route, and the addresses app connectors resolve for your apps.
- Your workspace's DNS settings: its nameservers, split DNS and search domains. Devices answer names themselves, or ask the nameservers your admins chose; DNS questions don't pass through us.
- If your workspace uses HTTPS certificates: each certificate's name and expiry. The certificate's private key is made on the device and never leaves it.
Logs
- Audit log: changes made in your workspace (who did what, when), with the IP address and browser of the person who did it.
- Network logs: only if a workspace admin turns them on. They record which devices connected to which, on which ports, and how much data moved. For traffic sent through an exit node or a subnet router, that includes the outside address and port it went to. They never contain the content of the traffic.
- Service logs: errors and requests our servers handle, kept briefly to run and protect the service.
What we don't collect
- The content of traffic between your devices. It's encrypted end to end, and the relay only forwards packets it can't read.
- Browsing history, or which websites your devices visit. The one exception is the outside addresses network logs record (above), and only when your admins turn those logs on.
- Advertising or cross-site tracking data. Our website and dashboard use no analytics or ad trackers.
How we use it
- To provide the service: connect your devices, show your workspace in the dashboard, enforce your access rules.
- To keep it secure: detect abuse, investigate incidents, rate-limit sign-in attempts.
- To communicate: sign-in codes, invites, approvals, and notices about your account or these terms.
- To support you and improve the service, including through the support assistant (below).
- To meet legal obligations.
If you're in the EEA or the UK, our legal bases are performance of our contract with you, our legitimate interests in running and securing the service, your consent where we ask for it, and legal obligations.
The support assistant
The dashboard's support chat is answered by an AI model from Anthropic. What you type there is sent to Anthropic to produce the answer. The assistant can't see your devices, logs or account. Don't paste secrets like auth keys into it.
Who we share it with
We don't sell personal information, and we don't share it for advertising. We share it only with:
- The companies that help us run the service, listed on our Subprocessors page, under contracts that limit them to that work.
- Places your workspace admins send data to: webhooks and log streams (Slack, Datadog and the like) are set up by your admins and receive your workspace's logs.
- Authorities, when the law requires it. We'll tell the affected workspace unless we're not allowed to.
- A buyer or successor, if the company is sold or merged, under this policy.
If your workspace uses HTTPS certificates for its devices, the certificate authority (Let's Encrypt) publishes each certificate, including the device's name, in public Certificate Transparency logs. Name devices accordingly.
How long we keep it
| Data | Kept |
|---|---|
| Account and workspace | Until you delete your account (in your account settings) or ask us to; then removed right away, or within 30 days if you ask us. Audit-log entries expire on their own schedule (below) |
| Devices | Until removed from the workspace; short-lived (ephemeral) devices remove themselves when they go offline |
| Audit log | 90 days |
| Network logs (if turned on) | 30 days |
| Encrypted backups | Up to 30 days |
| Support and contact-form messages | As long as needed to help you, then deleted within 12 months |
| Billing records | As long as tax and accounting law requires |
Security
We protect data in transit with TLS and WireGuard, encrypt backups, and limit who on our side can reach production systems. See Security & Disclosure. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent. Write to privacy@getunderpass.com. We'll answer within 30 days and won't treat you differently for asking. If your data is in an organization's workspace, we may pass your request to that organization. You can also complain to your data protection authority.
International transfers
We and our subprocessors may process data in countries other than yours. Where the law requires it, transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses.
Children
The service isn't for children under 16, and we don't knowingly collect their data.
California notice
For California residents, under the California Consumer Privacy Act (as amended by the CPRA):
- Categories we collect: identifiers (name, email, IP address), internet activity related to the service (device connections, audit and network logs), and commercial information (plan and billing). The sections above give the sources and purposes.
- No sale or sharing: we don't sell personal information or share it for cross-context behavioral advertising, and haven't in the past 12 months.
- Sensitive information: we use account credentials only to provide the service, not to infer anything about you.
- Your rights: to know, delete and correct your information, and not to be discriminated against for using these rights. Ask at privacy@getunderpass.com; an authorized agent can ask for you. We'll verify the request against your account.
Changes
If we change this policy in a meaningful way, we'll update the date above and tell workspace owners by email or in the dashboard before it takes effect.
Contact
Sukses360 Ltd, [Registered address]. Privacy questions: privacy@getunderpass.com.
Underpass is operated by Sukses360 Ltd · [Registered address]