Legal
Summary: SLAKeeper collects performance timing data from your browser sessions on supported SaaS platforms. Each record is keyed by a random identifier assigned when you install the extension and includes the hostname of your SaaS instance, which identifies your organisation, and the IP address the data was sent from. The extension does not collect your name, email address, credentials, or the content of the pages you view. If you create a dashboard account, we collect the name and email address you provide for that account. You can uninstall the extension at any time to stop all data collection.
SLAKeeper ("we", "us", "our") is operated by SLAKeeper (ABN: 59 671 266 131). We provide a browser extension and web platform that independently measures the performance of SaaS applications. Our registered address is 2/290 Boundary Street, Spring Hill, QLD 4000.
If you have questions about this policy, contact us at privacy@slakeeper.io.
When you use the SLAKeeper browser extension on a supported SaaS platform, we collect the following timing metrics using your browser's standard Web APIs:
We record the URL path of each page to associate timings with a specific screen or workflow. URLs are normalised in your browser before being sent: UUIDs, numeric IDs, long tokens, and other high-entropy path segments are stripped and replaced with a placeholder (e.g. /records/[id]). Human-readable path segments, such as the names your organisation has given to projects or views, are not stripped and may be retained in normalised form. Query strings and page content are never sent.
We collect the hostname of your SaaS instance (e.g. acme.atlassian.net) and send it with each timing record, so that timings from the same organisation can be grouped together. This hostname identifies your organisation, not individual users within it.
We also collect:
If you create an account to view your organisation's reports in the SLAKeeper dashboard, we collect the name and email address you provide and store a hashed form of your password, in order to authenticate you and control access to your organisation's data. This is separate from the timing data described above and is retained for as long as your account is active.
Collected timing data is used to:
We do not use your data for advertising, profiling, or sale to third parties.
Timing data is batched locally in your browser and sent to our servers periodically over an encrypted HTTPS connection. Data is compressed before transmission. We apply server-side limits to guard against abuse.
Data is stored on our servers, located in Sydney, Australia. We retain raw timing data for up to 12 months, after which it is deleted or aggregated into statistical summaries. Aggregated statistics may be retained beyond that period.
We do not sell your data. Dashboard reports currently show your organisation's own data only; we do not combine it with other organisations' data. In future we may publish aggregated, anonymised benchmark statistics (for example, the median page load time across a supported platform for a given week). Before we do so we will update this policy, and we will only publish statistics for a platform once enough organisations contribute to it that no single organisation's data is identifiable.
We use third-party cloud infrastructure providers who may process data on our behalf under data processing agreements. We do not share identifiable data with advertising or analytics platforms.
You have the right to request access to the data we hold about your installation, your account, or your organisation, and to request correction of any inaccurate data. Timing data is keyed by a random identifier assigned when the extension is installed; on request we will delete all data associated with your installation, or all data associated with your organisation's instance hostname. To make an access, correction, or deletion request, contact privacy@slakeeper.io. We aim to respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au, or with your local data protection authority if you are located outside Australia. If you are located outside Australia, we process your data on the basis of our legitimate interest in providing the Service, or to perform our contract with your organisation, and you may have additional rights under your local law.
You can stop all data collection at any time by disabling or uninstalling the SLAKeeper extension from your browser.
The SLAKeeper extension uses your browser's local storage to hold the credentials issued when you install the extension (a random identifier and a secret used to authenticate uploads), to temporarily buffer timing data before it is sent to our servers, and to cache a small amount of recent performance data so the extension can display it without a network request. The upload buffer is cleared after each successful upload; the rest is retained until you uninstall the extension. None of this is a tracking cookie, and none of it is shared with other websites. We do not use cookies on this website or in the extension for tracking or advertising.
If your organisation deploys the SLAKeeper extension to your device through device management or another enterprise policy, rather than you installing it yourself, your organisation is responsible for giving you notice that this monitoring is occurring, consistent with its own workplace policies and applicable law. The extension does not read the content of anything you view or type; it measures only page and request load times, as described above. If you have questions about why SLAKeeper is installed on your device, contact your organisation's IT department, or email privacy@slakeeper.io.
If we experience a data breach that is likely to result in serious harm to any individual, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.
SLAKeeper is designed for use by business professionals and is not directed at children under 13. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the extension after changes constitutes acceptance of the updated policy.
Questions about this policy? Reach us at privacy@slakeeper.io.