Privacy Policy

CheckPt is committed to protecting your privacy. This policy describes how we collect, use, and protect your information.

We collect minimal data necessary for service operation:

• Device identifiers (random, opaque)
• Usage metrics (anonymized)
• Connection metadata

All traffic is encrypted in transit (TLS), and approval and session content is end-to-end encrypted: sealed on your paired devices, so the relay carries and stores it only as ciphertext it cannot read, alongside control-plane signaling (pairing, presence, and push registration). The relay keeps no activity log on any plan — server-side retention is limited to sealed content and the minimal operational metadata described below.

No plan has a server-side activity log: readable approval and session history lives only on your own devices, where you control it. The relay retains sealed content it cannot read, plus minimal operational data — device and session IDs, timestamps, routing info, and the names of your devices, projects and repositories. You can delete your account data at any time.

We never sell or rent your personal information, and we do not share it for advertising. We do rely on service providers to run CheckPt, and they process data only on our instructions: cloud hosting and storage, payment processing, transactional email, SMS one-time passcodes, push notification delivery, and product analytics. Each one is named on our subprocessor list, together with what it receives. Some data is also sent to services you connect yourself — a chat workspace, a code host, or a tunnel provider — which act on your instructions rather than ours.

See the full subprocessor list

We publish a named list of every third party that processes personal data on our behalf — what each one does, what it receives, and where it runs. We update the list before a new subprocessor starts processing, so you can review it in advance.

View the subprocessor list

If you use CheckPt for business, we offer a Data Processing Agreement covering our processing on your behalf, including Standard Contractual Clauses for transfers outside the EEA and the UK.

Request a DPA

You have the right to:

• Access your data
• Correct inaccuracies
• Request deletion
• Export your data
• Use BYO Relay for control over signaling (Team and Enterprise, rolling out)

You can delete your CheckPt account and its data yourself, from the app or the web. It is a real cascading deletion, not a flag on a row.

• On the web: Dashboard → Settings → Delete account.
• In the mobile app: Settings → Danger Zone → Delete account.

One carve-out, and we would rather state it than have you meet it: if your account has ever been charged, the self-service deletion stops and tells you so, because tax and accounting law requires us to keep the payment records. Write to privacy@checkpt.io and we complete the deletion for you, retaining only those records and anonymising the personal data in them.

Three things outlive the deletion, and we would rather name them than let you find out:

• Payment and transaction records, which tax and accounting law require us to keep. The personal data in them is anonymised when you delete, and the anonymisation is purged on a 30-day schedule.
• Feedback and bug reports you sent us are stripped rather than deleted. The link to your account, the contact email on it and the device id all go; the report and the technical context that makes it useful stay, and none of it identifies you. One consequence, stated plainly: we can no longer reply to you about it.
• Backups, until the backup rotates out. Data persisting only in a backup is isolated from active use and goes when that backup expires.

If you cannot sign in to reach the controls above, write to privacy@checkpt.io and we will carry out the deletion for you.

CheckPt is a product of Lockdown Media Inc., which is the data controller for the personal data described in this policy. For privacy questions, or to exercise any of the rights above, contact us at privacy@checkpt.io.