Privacy Policy

1. Data we collect

We collect only the data needed to run the service and the account you use it with.

Account data, such as your email address, a hashed password, your name if you provide it, and the team you belong to.
Team data, such as the email addresses and roles of members you invite.
Monitor configuration, such as the URLs, hostnames, ports, keywords, request headers and assertions you set up. Credentials you enter for API checks are stored encrypted.
Check results, such as status codes, response times, certificate and domain details and incident history for the monitors you create.
Alert contacts, such as email addresses, phone numbers for SMS alerts, and chat and webhook addresses you connect.
Status page data, such as the content you publish and the email addresses of people who subscribe to updates on your status pages.
Billing data, such as your plan, invoices and the billing details you provide. Card details are entered directly with our payment processor and are not stored by us.
Technical data, such as IP addresses, browser type and server logs created when you use the website or the demo check, including the IP address used to apply daily limits to demo checks.
Support messages you send to [email protected].

2. How we use your data and on what basis

To provide the service you signed up for: running checks, sending alerts, publishing status pages and producing reports. Basis: performance of a contract.
To create and secure your account, confirm your email address and protect the service against abuse. Basis: performance of a contract and our legitimate interest in security.
To bill your subscription and keep accounting records. Basis: performance of a contract and legal obligations.
To answer support requests. Basis: performance of a contract and legitimate interest.
To send service messages, such as confirmation codes, alerts, renewal notices and important changes. Basis: performance of a contract.
To improve the reliability and performance of the service using aggregated technical data. Basis: legitimate interest.

We do not sell personal data, we do not use it for advertising profiles, and we do not use check results or monitor data for any purpose other than providing the service to you.

3. Who receives your data

We share personal data only with service providers that process it on our behalf and under our instructions, and only to the extent needed for their task. We describe them by category.

A hosting provider that runs our servers and stores data.
A payment processor that handles card payments and subscriptions.
An email delivery provider that sends confirmation codes, alerts and service messages.
An SMS delivery provider that delivers SMS alerts to the numbers you choose.
Chat and webhook destinations you connect yourself, which receive alerts at your request.

We may also disclose data when required by law or to protect our rights, our users or the public.

4. International transfers

Our providers may process data in the United States and in the European Economic Area. Where data is transferred outside the country in which it was collected, we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.

5. How long we keep data

Check results and incident history are kept for the data history of your plan: 90 days on Starter, 1 year on Team, 2 years on Business and 3 years on Enterprise.
Account, team and monitor configuration data are kept while your account is active and deleted when you close the account.
Status page subscriber emails are kept until the subscriber unsubscribes or the status page is deleted.
Billing records are kept for the period required by tax and accounting law.
Technical logs are kept for a limited period needed for security and troubleshooting, usually no longer than 90 days.
Demo check results are kept for a short period so the result page can be shown, then deleted.

6. Cookies

The website and the application use only strictly necessary cookies: a session cookie that keeps you signed in, a security token that protects forms against cross site requests, and a cookie that remembers simple preferences. They are required for the service to work, so no consent banner is shown. We do not use advertising cookies, tracking pixels or third party analytics cookies.

7. Your rights

Depending on where you live, you have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing is based on consent. Residents of the European Economic Area and the United Kingdom can also lodge a complaint with their local data protection authority.

Residents of California and other US states with privacy laws have the right to know what personal information we collect and how it is used, to request its deletion and correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross context behavioral advertising.

To exercise any right, write to [email protected] from the email address of your account. We may need to confirm your identity before acting on the request. We respond within the time required by applicable law.

8. Data you process with the service

When you add monitors, alert contacts, team members or status page subscribers, you decide what data goes into the service and why. For that data, you act as the controller and we process it on your behalf to provide the service. You are responsible for having a lawful basis to add the personal data of other people, such as phone numbers of colleagues for SMS alerts.

9. Security

We protect data with encryption in transit, encrypted storage of credentials, access limited to people who need it, and regular review of our systems. Read more on the uptime monitoring security page. No system is perfectly secure, so if you believe your account has been compromised, contact us at [email protected] right away.

10. Children

The service is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy when the service or the law changes. We publish the new version on this page with a new date, and we notify account owners by email about material changes.

12. Contact

Questions about this policy or your data go to the administrator of the uptimepilot.com service at [email protected].