Skip to content
My Beast
Cart
Developer docsMenu

Incidents · Plans and data

Data and privacy

Incidents keeps what you and your systems write about an incident, and nothing it collects by itself: there is no SDK on your servers.

What it keeps

Loading what it keeps…

What you type is kept as you typed it

Nothing runs on your servers to scrub it first: an incident's title, summary and updates, a follow-up and the write-up are kept as written, by a person or by a call to the API. Changing a title keeps the old one on the timeline.

Keep secrets and personal data out

A title and every update that isn't internal can go out by email, to Telegram and Slack, and onto your public status page. Don't paste a key, a password or your users' personal data into them: write “a customer”, not their name or address.

Where it goes

  • Notices carry the incident's reference, title, severity, status, the lead's name (or email address, when they gave no name) and the message posted with the change, to the addresses, chats and channels you chose. An internal note never goes.
  • Your status page shows only the incidents someone chose to show, with their title, severity, status and public updates. Never an internal note, the lead, a follow-up, the write-up, or who wrote anything.
  • Other My Beast products in the project see that an incident was open at a moment, with its reference and title, for the people who open the project in Incidents.

How keys and channels are kept

  • A server secret is kept only as a fingerprint: it is shown once, and reaches only its own project.
  • A Telegram bot token and a Slack webhook are kept encrypted, and never shown again.
  • Declaring, resolving, declining and reopening an incident, showing it on the status page or taking it off, and each test notice are written in the project's audit log.

Erasing data

Incidents keeps no data about your own users unless someone writes it into an incident. Your team appears by name, as an incident's lead, a follow-up's owner and the author of each change.

Incidents and their updates can't be deleted from the pages: the timeline is the record of what happened. A follow-up can be removed. To have something erased, a person's name or details typed into an incident, write to us with the project and the incident's reference, and we erase it for you, as our data processing terms say.