Privacy policy
Last updated October 5, 2026
This policy explains what Loblolly Labs, LLC ("Cirrys", "we") collects through cirrys.com and the Cirrys app, why, and what you can do about it.
Who this covers
- MSPs who use Cirrys to run their service desk and monitor their clients' networks.
- Their clients' staff who use the support page to raise and follow requests.
- Site contacts whose details an MSP keeps so it knows who to call.
- Visitors to cirrys.com, including anyone who requests early access.
Our role
For the data an MSP puts into Cirrys about its clients, the MSP decides what is collected and why, and we process it on the MSP's behalf. If you are a client or site contact, your MSP is your first point of contact about your data. For early access requests and MSP account details, we decide how they are used.
What we collect
- Account details: names, work email addresses and roles of people who sign in.
- Contacts: names, roles, phone numbers, email addresses and contact preferences for client sites.
- Requests and tickets: what people write, the photos and files they attach, and who did what and when.
- Network data from UniFi: console and device names, models, MAC and IP addresses, online status and internet provider names.
- Credentials an MSP stores in the vault, encrypted, with a log of every view.
- Early access requests: your name, work email, company, number of sites and anything you tell us about your tools.
- Basic technical data: the sign-in cookie, and server logs such as IP addresses kept for security.
How we use it
To run the service: show the right data to the right people, send the emails the service sends (like replies and updates on requests), keep it secure, and support you. We use early access details only to reply to you about Cirrys. We don't sell data, show ads, or use tracking cookies.
Who processes it for us
- Vercel hosts the app and website.
- Our database and file storage providers store the data.
- Mailgun delivers email.
- Ubiquiti provides the UniFi data the MSP connects.
- Microsoft Teams and Slack, only if the MSP connects them for alerts.
Data is stored in the United States.
How long we keep it
For as long as the MSP's account is active, or until the MSP deletes it. When an account closes we delete its data within 90 days, except where we must keep something by law. Early access requests are deleted within 12 months if we don't go on to work together.
Your choices
You can ask to see, correct or delete your personal data. If an MSP holds your details, ask them first; we'll help them respond. For anything else, email privacy@cirrys.com.
Changes
If we change this policy in a way that matters, we'll update the date above and tell account holders by email.
Contact
Loblolly Labs, LLC, 1130 W Pioneers Blvd, Lincoln, NE 68522. privacy@cirrys.com