Privacy Policy

CheckPt is committed to protecting your privacy. This policy describes how we collect, use, and protect your information.

We collect minimal data necessary for service operation:

• Device identifiers (random, opaque)
• Usage metrics (anonymized)
• Connection metadata

All traffic is encrypted in transit (TLS), and approval and session content is end-to-end encrypted: sealed on your paired devices, so the relay carries and stores it only as ciphertext it cannot read, alongside control-plane signaling (pairing, presence, and push registration). The relay keeps no activity log on any plan — server-side retention is limited to sealed content and the minimal operational metadata described below.

No plan has a server-side activity log: readable approval and session history lives only on your own devices, where you control it. The relay retains sealed content it cannot read, plus minimal operational data — device and session IDs, timestamps, routing info, and the names of your devices, projects and repositories. You can delete your account data at any time.

We never sell or rent your personal information, and we do not share it for advertising. We do rely on service providers to run CheckPt, and they process data only on our instructions: cloud hosting and storage, payment processing, transactional email, SMS one-time passcodes, push notification delivery, and product analytics. Each one is named on our subprocessor list, together with what it receives. Some data is also sent to services you connect yourself — a chat workspace, a code host, or a tunnel provider — which act on your instructions rather than ours.

See the full subprocessor list

We publish a named list of every third party that processes personal data on our behalf — what each one does, what it receives, and where it runs. We update the list before a new subprocessor starts processing, so you can review it in advance.

View the subprocessor list

If you use CheckPt for business, we offer a Data Processing Agreement covering our processing on your behalf, including Standard Contractual Clauses for transfers outside the EEA and the UK.

Request a DPA

You have the right to:

• Access your data
• Correct inaccuracies
• Request deletion
• Export your data
• Use BYO Relay for control over signaling (Team and Enterprise, rolling out)

CheckPt is a product of Lockdown Media Inc., which is the data controller for the personal data described in this policy. For privacy questions, or to exercise any of the rights above, contact us at privacy@checkpt.io.