The data Vitalnodo collects

In short

• The agent only sends technical data about the machine: health, hardware, network and security posture.
• It never collects files, documents, emails, browsing, keystrokes, screenshots or passwords.
• Only the users of the technician's account see the data. It is deleted automatically according to the plan.
• You can export or delete everything from Settings › Privacy & data.

What the agent sends

The agent sends an encrypted, signed report every minute. Some parts are measured less often and are resent with the last known value. The table shows how often each item is updated.

In addition, when the agent is installed, the public IP it connects from is recorded in the account's audit log. Some data, such as the computer name, serial number, IP or MAC, can indirectly identify the person using the machine. That's why we treat it as personal data.

What it never collects

• Files or their contents
• Document or folder names
• Emails or messages
• Browsing history
• Keystrokes
• Screenshots, audio or video
• Passwords
• List of installed programs
• Processes or their arguments
• GPS location
• Session user names
• Clipboard contents

The only exception to "installed programs" is antivirus or EDR products, to know whether the machine is protected. And in this version there is no remote access: the agent cannot see the screen or run commands.

A real report, shortened

This is what the agent on a Windows 11 machine sends. The data is fictitious. We removed repeated items, but there are no hidden fields: nothing is sent that doesn't look like this.

{
  "sample": "q7m2x9k4c1v8b3n6h5j0wd",
  "captured": 1793284320,
  "hostname": "RECEPCION-01",
  "os": "Windows 11 Pro 10.0.26100",
  "platform": "windows",
  "arch": "amd64",
  "version": "1.0.0",
  "cpu": 12.4,
  "ram": 58.1,
  "ramTotal": 17179869184,
  "cores": 8,
  "uptime": 278280,
  "procs": 212,
  "bootTime": 1793006040,
  "cpuModel": "Intel(R) Core(TM) i5-12400",
  "manufacturer": "Dell Inc.",
  "model": "OptiPlex 7000",
  "serial": "7H2KX93",
  "chassis": "desktop",
  "users": 1,
  "ip": ["192.168.1.24"],
  "mac": ["3c:52:82:1a:7f:09"],
  "nics": [{
    "name": "Ethernet",
    "speed_mbps": 1000,
    "up": true
  }],
  "volumes": [{
    "name": "C:",
    "fs": "NTFS",
    "total": 511101108224,
    "free": 198431567872,
    "used": 61.2
  }],
  "network": [{
    "name": "Ethernet",
    "rx": 18432.5,
    "tx": 4096.0
  }],
  "temps": [{"name": "cpu", "c": 54.0}],
  "smart": [{
    "disk": "Disk 0 KIOXIA BG5",
    "ok": true,
    "detail": ""
  }],
  "pendingReboot": false,
  "security": {
    "av": [{
      "name": "Microsoft Defender",
      "enabled": true,
      "realtime": true,
      "up_to_date": true,
      "signatures_at": 1793254200
    }],
    "firewall": {
      "enabled": true,
      "profiles": [{"name": "Public", "enabled": true}]
    },
    "disk_encryption": {
      "enabled": true,
      "method": "BitLocker",
      "volumes": [{"name": "C:", "encrypted": true}]
    },
    "updates": {
      "pending": 2,
      "security": 1,
      "checked_at": 1793241600,
      "source": "wua"
    },
    "os": {
      "family": "windows",
      "name": "Windows 11 Pro",
      "version": "10.0.26100",
      "build": "26100",
      "release": "24H2",
      "edition": "Professional"
    }
  },
  "notes": []
}

Times are in Unix seconds. sample is a random identifier that prevents the same report from being counted twice.

How long it is kept

Data is deleted automatically by a daily purge. Metric history is stored aggregated in 5-minute intervals.

If you downgrade, history older than the new period is deleted in the next daily purge. Full details are in the privacy policy.

Where it is stored

On Cloudflare: the database and storage are in its Eastern North America region (ENAM, United States), and traffic goes through its global network of data centers. Everything travels encrypted over HTTPS. More details in Subprocessors and Security.

Browser notifications (optional). If you turn them on, we store the delivery address your browser gives us. The notification is carried by your browser's push service (Google, Apple, Mozilla or Microsoft), end-to-end encrypted, and it only says the machine name and the type of alert. You can remove them in Settings › App & notifications or by signing out on that browser. More in the Privacy policy.

Who can see it

• The users of the technician's account, according to their role and the clients they have access to.
• Vitalnodo staff only when you ask for support on a specific case or when a law or valid order requires us to. We don't look at data out of curiosity or use it for anything else.
• Nobody else. We don't sell data, we don't use it for advertising and we don't share it with third parties, except the providers we need to operate (Subprocessors).

If you use a machine with the agent installed, the technician or company that manages it decides about that data. You can contact them, or write to us and we'll forward your request to them.

Export and delete

From Settings › Privacy & data you can:

• Export all of your account's data as a JSON file (owner and administrators).
• Delete a machine from its page. It stops accepting reports from that moment.
• Delete the account entirely (owner, with password and 2FA code if enabled). Export anything you want to keep first: deletion cannot be undone.

Deleting the account or a machine doesn't uninstall the agent: uninstall it from the machine too. And if you have a subscription, cancel it in Gumroad so it doesn't renew.

For any other request about your data, email us at privacidad@vitalnodo.com.