Privacy Policy

1. Overview & Commitment

Critical Systems Network ("CriticalSys", "we", "our") operates high-availability cloud infrastructure, telemetry services, and internal backup automation across criticalsys.net and its subdomains (including share.criticalsys.net and monitor.criticalsys.net). We are committed to protecting data privacy, minimizing data retention, and maintaining strict confidentiality.

2. Data Collection & Processing

We do not track, profile, monetize, or sell user personal information. Information handled across our infrastructure falls strictly under operational categories:

• Server & Access Logs: Web server requests generate transient connection logs (IP address, user-agent, requested URI, HTTP status code) solely for security forensics, rate limiting, and DDoS mitigation. Logs are automatically rotated and retained for a maximum of 30 days.
• Cloud Backup & Storage Integrations: Where automated tools interact with cloud storage providers (such as Google Drive via OAuth APIs), access tokens are utilized strictly to upload and manage encrypted system snapshot archives (AES-256). No user email, contact, or personal drive content is read, indexed, or processed.

3. Google API Services Compliance

Critical Systems Network's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the minimal necessary permissions required for automated offsite snapshot storage.

4. Security Architecture & Encryption

All network traffic across our domains is strictly encrypted in transit using TLS 1.3 and HTTP/3 QUIC. All persisted offsite backups are symmetrically encrypted using AES-256 with OpenPGP Modification Detection Code (MDC) prior to egress.

5. Security Contact & Inquiries

For any questions regarding this Privacy Policy or system security disclosures, please reach our DevOps Engineering team directly through our encrypted operations channel: