Your privacy
matters to us.

Sunny Systems ("we", "us", or "our") operates the Sunshine platform, accessible at sunshine.sunnysystems.com.br. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services. By using Sunshine, you agree to the practices described in this policy.

• Account information: your name, email address, and company name provided during registration.
• Usage data: analytics, application logs, page views, and feature interactions to help us understand how the platform is used.
• Integration data: API keys you provide are stored in an encrypted vault. We also process billing metrics and usage data retrieved through your authorized integrations.

• Provide, operate, and improve the Sunshine platform.
• Process payments and manage your subscription.
• Send transactional alerts (e.g., SMS and email notifications for usage thresholds).
• Communicate product updates and relevant information.
• Ensure security, prevent fraud, and enforce our terms of service.

Your data is hosted in Brazil: the application on Magalu Cloud and the database on Supabase, in São Paulo. All data in transit is encrypted using TLS. API keys and credentials are stored in an encrypted vault and, once saved, are never sent back to the browser. Each organization can only access its own data, and every creation, change or removal of a Datadog credential is recorded in the organization's audit log. The details are in our Trust Center (sunshineapp.ai/trust).

We use a limited number of third-party service providers to operate Sunshine:

• Cloud infrastructure: Magalu Cloud (hosting) and Supabase (database), both in Brazil.
• AI provider (Anthropic): runs the AI features. It receives only the structure of your logs and monitors, never values, message content or your organization's name.
• Email and SMS delivery providers (including Resend), Google (sign-in with Google, and Google Analytics on the public website) and Gravatar (profile pictures).
• Payment processor (Stripe): to handle card billing, when it is enabled for your account.
• Third-party APIs: services you choose to integrate (e.g., Datadog, Slack, GitHub, Jira, Linear), each governed by their own privacy policy.

We do not sell your personal information to any third party. The full list, with what each one receives and where, is in our Trust Center.

Inside the app, Sunshine uses only essential cookies for session management and authentication. On the public website (home, pricing, FAQ and similar pages) we use Google Analytics, which sets its own cookies to measure visits. We do not use advertising cookies.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Request a copy of your data in a portable format.
• Opt out of non-essential marketing communications.

To exercise these rights, contact us at contato@sunnysystems.com.br. Your profile details can also be changed directly in your account settings.

We retain your data while your account and organization are active. We do not yet delete data automatically after cancellation: to have your account or your organization's data deleted, contact us and we will delete it. How long each type of data is kept is described in our Trust Center.

Sunshine is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email before the changes take effect. For any questions or concerns about this policy, contact us at:

contato@sunnysystems.com.br