Privacy Policy for Argo2Go Notification Service

TLDR: The sole purpose of this service is to serve as a backend for distributing push notifications to Argo2Go app users. The information collected is the bare minimum that is required to serve this purpose, namely:

• User details for identification purposes (i.e. email, phone number, etc.)
• Argo-CD URLs that you connected to using the app (only the URL, nothing else)
• Applications that you subscribed to (only their name, namespace and project)
• Reporting tokens and usage information (to authenticate events and rate limit)

What payload do we receive?

You can see the exact payload structure that is reported to us by checking the argocd-notifications-cm configmap and looking at the body property under the argo2go template. It shows the payload that we receive for each application event.

Here is an example of an event payload you might send us:

{
    "application": {
        "name": "argo-cd",
        "namespace": "argocd",
        "appProject": "default",
        "healthStatus": "healthy",
        "commitDetails": {
            "author": "some author",
            "date": "DATE",
            "message": "Commit message",
            "sha": "Commit SHA"
    	}
    }
}

What are we doing with that payload?

Upon receiving an event we:

1. Verify and authenticate the reporting token sent in the Authorization header (rate-limit is also enforced here)
2. Parse and verify the event payload
3. Get the users that subscribed to this event
4. Send a push notification to each of the subscribed users' devices

After processing the event, the payload is discarded and not persisted anywhere.

Revoking reporting tokens

You may revoke a generated reporting token at any time by going to the Tokens Table and clicking on the button of the token you want to revoke. Once a token is revoked, any attempt to use it to report application events would fail with 401 Unauthorized status.

Deleting your user

You may delete your user at any time via the website or directly through the app.

Via The Website

By clicking on your user profile at the top right side of this site and then clicking on " Delete User". You will then be asked to confirm this action. If you confirm you user will be deleted immediately.

Via The App

By clicking on the " Delete User" button in the app settings.

Upon user deletion all the information collected relating to this user will be deleted immediately. This includes all of the reporting tokens generated by this user, which means push notifications will no longer be sent to the associated devices.

To continue using the app after deleteing your user you will have to sign-in again.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

• By email: roikramer120@gmail.com
• On github: https://github.com/rkrmr33/argo2go-support/issues