Privacy policy

Account details. Your name, email address and password when you sign up. Passwords are handled by our authentication provider and stored only in hashed form. If you sign in with Google, we receive your name and email from Google.

Workspace and team data. Workspace names, the members of each workspace and their roles, and the email addresses of people you invite.

Monitoring data. What you ask us to monitor (website and API addresses, hostnames and ports, DNS records, keywords, request headers and bodies for API checks) and the results of every check: when it ran, whether it succeeded, response times, status codes and error messages. Don't put secrets in monitor settings unless you need to; anyone in your workspace can see them.

Alert settings. Email addresses and webhook addresses (for Slack, Discord or your own systems) that you add as alert channels.

Billing details. Payments are processed by Razorpay. We store your subscription's identifier, plan, price, currency, status and renewal date. We never see or store your full card number, UPI PIN or bank login.

Messages to us. When you use the contact form we store your name, email, topic, message and your browser's user-agent string. Your IP address is used briefly, in memory, to limit spam and is not stored with the message.

Technical information. Our servers log requests (time, path, response code) to keep the service running and secure. Our hosting providers may log IP addresses for security. We use your approximate country, provided by our hosting provider, only to show prices in your currency; we don't store it.

We use only what the service needs to work:

• Sign-in cookies that keep you logged in. Without them you can't use your account.
• Browser storage for your theme (light or dark) and which workspace you last opened.

We don't use advertising or third-party tracking cookies.

• To provide the service: run your checks, record results, show your dashboard and send the alerts you set up.
• To manage your account, workspaces, invitations and subscription, including billing and renewal reminders sent by Razorpay.
• To publish the status pages you choose to make public, showing only the service names and status history you select.
• To answer your questions and support requests.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal obligations, such as keeping billing records.

We use these providers to run the service. Each processes data only to provide its part of the service to us:

• Supabase: sign-in and database hosting.
• Vercel: hosting of the website.
• Our application host (such as Railway or Render): runs the monitoring service.
• Razorpay: payment processing and subscription billing.
• Our email provider: delivers alert and account emails.

When you add an alert channel, alerts are sent to the destination you chose (for example Slack, Discord or your own webhook) and are then handled under that service's own policies. We may also disclose information if required by law. We don't sell or rent personal data.

• Check history is deleted automatically after your plan's retention period: 7 days on Free, 90 days on Pro.
• Account and workspace data is kept while your account is active. Deleting a workspace deletes its monitors, checks, incidents, alert channels and status pages.
• Billing records are kept for as long as tax and accounting laws require.
• Contact messages are kept for as long as needed to handle your request and related follow-up.

You can view and update most of your information in the app. You can also ask us to give you a copy of your personal data, correct it, or delete your account and personal data, subject to records we must keep by law. If you are in India, you have these rights under the Digital Personal Data Protection Act, 2023, including the right to have a grievance addressed.

To make a request or raise a grievance, email [email protected] or use the contact form. We respond within 30 days.

Data is encrypted in transit with HTTPS. Each workspace's data is isolated and only reachable through our application, which checks that you belong to the workspace on every request. Our checks refuse to reach private network addresses. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you and the relevant authorities as the law requires.

The service is for businesses and professionals. It is not meant for anyone under 18, and we don't knowingly collect their data.

We may update this policy as the service changes. We'll change the “Last updated” date above and, for significant changes, tell account owners by email or in the app before they take effect.

Spot Downtime, Made in India. Email: [email protected].