Privacy Policy
Last updated: June 24, 2026
This Privacy Policy explains how vanRoojen LLC handles personal information for TvRMM. The short version is simple: TvRMM is not built around advertising resale, silent vendor access, or trapping customer data. We collect what is needed to run the service, protect customers, bill fairly, support tenants, and improve the product.
Scope
This policy covers:
- the TvRMM product website at
tvrmm.com; - the hosted TvRMM portal at
portal.tvrmm.app; - contact forms, support requests, signup flows, billing flows, feature requests, and customer communications;
- endpoint and tenant data processed by hosted TvRMM.
Customer endpoint and tenant operational data is also covered by the Data Processing Addendum when TvRMM acts as a processor for the customer.
Information we collect
Account and tenant information
We collect account details such as name, email address, organization name, tenant membership, role assignments, login events, feature requests, support grants, and settings.
Endpoint and operational data
TvRMM may collect endpoint names, operating system details, hardware and software inventory, agent identity, network facts, heartbeat status, audit snapshots, patch posture, command results, scripts, logs, performance samples, reboot state, update state, homelab host inventory, guest inventory, policy assignments, and related operational metadata.
The exact data collected depends on endpoint type, policy configuration, support state, and customer actions.
Billing information
TvRMM stores billing account metadata, aggregate usage counts, active-agent counts, stale-agent exclusions, invoices, invoice lines, account-credit ledger entries, refund records, protected price tranches, self-service agent limit settings, Stripe object identifiers, and payment status metadata.
TvRMM does not store raw card numbers, bank account numbers, CVV codes, or Stripe secret keys.
Website and analytics information
The product website may collect basic privacy-preserving analytics such as page views, referrers, browser type, device type, approximate location, and timestamps. TvRMM does not use third-party behavioral advertising pixels on the product website.
Contact and support information
If you contact TvRMM, we collect the information you provide, including message content, contact details, attachments you choose to send, and follow-up communications.
Do not send passwords, private keys, access secrets, or full credential material through public contact forms.
How we use information
TvRMM uses information to:
- provide, secure, monitor, and improve the service;
- authenticate users and enforce roles;
- enroll, manage, update, and remove agents;
- show endpoint inventory, patch, script, log, performance, policy, and command state;
- process billing, account credit, invoices, refunds, cancellations, and wind-down access;
- provide support when approved or legally required;
- investigate abuse, security issues, reliability problems, or billing disputes;
- honor export, deletion, and privacy requests;
- comply with legal, tax, accounting, and security obligations.
AI features and customer data
TvRMM does not use customer endpoint, tenant, script, log, billing, or support data with AI systems by default. Future AI-based product features must be explicit opt-in.
When AI features are offered, the intended model is bring-your-own provider key. Customers choose whether to enable the feature, which provider account is used, and what data is submitted through that provider. Core RMM workflows should remain usable without enabling AI features.
Customer use of an AI provider may be governed by that provider's own terms, privacy policy, retention settings, and billing model. Customers should review those settings before enabling any AI workflow.
How we share information
TvRMM shares information only as needed for the service:
- with subprocessors listed in the Subprocessor List;
- with payment processors for billing and refunds;
- with service providers for hosting, storage, email delivery, DNS, security, analytics, source control, and operations;
- with customer-approved support personnel or support systems;
- with legal, tax, accounting, or security advisors;
- when required by law, court order, valid legal process, or to prevent harm.
TvRMM does not sell customer personal information. TvRMM does not share personal information for cross-context behavioral advertising.
Customer control and portability
TvRMM's product stance is export-first. Tenant owners should be able to export a redacted operational snapshot and request tenant deletion from the portal. Cancellation includes wind-down access so customers can export data, retrieve logs, uninstall agents, and migrate safely.
Some records may be retained where required for legal, tax, abuse-prevention, security, payment, backup, or audit reasons.
Privacy rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of personal information. You may also have the right to opt out of sale or sharing of personal information.
TvRMM does not sell or share personal information for cross-context behavioral advertising. Where a legally applicable global privacy control signal is received, TvRMM will treat it as an opt-out request for sale or sharing.
To make a request, use the contact form and choose a privacy or legal topic. We may need to verify your identity and authority before acting on a request.
California notice
For California residents, the categories of personal information TvRMM may collect include identifiers, customer records, commercial information, internet or network activity, geolocation approximations, professional information, account credentials, and inferences needed for security, fraud prevention, support, or service operation.
TvRMM uses these categories for the purposes listed in this policy. TvRMM does not sell personal information and does not share it for cross-context behavioral advertising. TvRMM does not knowingly sell or share personal information of children under 16.
California residents may request to know, delete, correct, opt out of sale or sharing, limit certain sensitive personal information uses where applicable, and not be discriminated against for exercising privacy rights.
Security
TvRMM uses technical and organizational measures designed to protect the service, including session authentication, role-based authorization, mTLS agent identity, trust bundles, certificate revocation paths, audit logging, and access controls.
No service can guarantee perfect security. Customers should maintain endpoint backups, least-privilege user roles, secure administrator credentials, and safe script review practices.
Data retention
TvRMM retains information according to the Data Retention and Deletion Policy. Retention depends on data type, customer settings, billing status, legal requirements, backups, support needs, and security requirements.
International processing
TvRMM is operated by vanRoojen LLC and may process data in the United States and other locations where subprocessors operate. Where required, TvRMM will use appropriate transfer mechanisms and customer terms for international transfers.
Children
TvRMM is not directed to children under 13 and should not be used to create accounts for children. Customers should not intentionally submit children's personal information unless they have a lawful basis and written approval for the use case.
Changes
TvRMM may update this Privacy Policy. Material changes should be announced through the website, portal, email, or another reasonable method.
Contact
Use the TvRMM contact form for privacy questions or requests.