Privacy Policy

This Privacy Policy describes how Poulima Infotech Pvt Ltd ("we", "us", or "our"), operating the UptimeMonitorX service at UptimeMonitoring.Services, collects, uses, and protects your personal information.

1. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored in hashed form using bcrypt).

Monitor Data: URLs, server addresses, DNS records, heartbeat endpoints, and monitoring configurations you provide to set up monitors.

Usage Data: We collect information about how you interact with our service, including page visits, feature usage, monitor check results, incident history, and API usage logs.

Payment Information: Payment processing is handled by Cashfree Payments. We store billing address, city, state, ZIP code, country, and GST number (if provided). We do not store your credit/debit card details or UPI IDs directly.

Notification Configuration: We store your notification channel credentials (Slack webhook URLs, Discord webhook URLs, Telegram bot tokens, WhatsApp numbers, and custom webhook endpoints) that you voluntarily provide for alert delivery.

Audit Data: We log account actions (login, monitor creation, settings changes, etc.) along with timestamps and IP addresses for security and compliance purposes.

Team Data: If you invite team members, we store their email addresses and assigned roles.

2. How We Use Your Information

• To provide and maintain the UptimeMonitorX service, including running monitor checks from 30+ global regions
• To send monitoring alerts and notifications via your configured channels (email, Slack, Discord, Telegram, WhatsApp, webhooks)
• To execute escalation policies and on-call notifications when incidents occur
• To process payments and manage your subscription via Cashfree Payments
• To perform SSL certificate and domain expiry monitoring
• To run Lighthouse performance audits via Google PageSpeed API
• To display your public status pages to visitors
• To communicate service updates, maintenance notices, and support ticket responses
• To generate analytics, SLA reports, and usage statistics
• To maintain audit logs for security and accountability
• To improve our service and develop new features
• To prevent fraud, enforce rate limits, and ensure platform security

3. Data Storage & Security

Your data is stored securely in MongoDB Atlas cloud infrastructure. We use industry-standard encryption for data in transit (TLS/SSL) and at rest. Passwords are hashed using bcrypt with a cost factor of 12. We implement rate limiting, CSRF protection, Content Security Policy headers, and comprehensive audit logging. API keys are securely generated and can be revoked at any time.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Payment Processors: Cashfree Payments for processing transactions
• Email Service: Brevo (formerly Sendinblue) for sending transactional emails (alerts, verification, password reset)
• Notification Services: Third-party platforms (Slack, Discord, Telegram, WhatsApp) only when configured by you
• Performance Analysis: Google PageSpeed Insights API for Lighthouse audits (your URL is sent to Google)
• Status Page Visitors: Monitor names, status, and uptime data are visible on your public status pages
• Legal Requirements: When required by law or to protect our legal rights

5. Cookies

We use essential cookies for authentication (NextAuth.js session tokens) and session management. We use Google Analytics to understand service usage patterns. You can control cookie settings through your browser preferences.

6. Your Rights

You have the right to:

• Access your personal data stored with us
• Request correction of inaccurate data
• Request deletion of your account and all associated data (monitors, incidents, API keys, team data)
• Export your monitoring data, analytics, and reports in CSV/PDF format
• Revoke third-party notification integrations at any time
• Delete your API keys and revoke API access
• Opt out of non-essential communications

7. Data Retention

We retain your data for as long as your account is active. Monitor check history is retained based on your subscription plan: Free (1 day), Pro (30 days), Business (90 days). Audit logs are retained for 90 days. Upon account deletion, your personal data will be permanently removed within 30 days.

8. Community & Public Content

If you participate in the community forum, your posts, comments, and display name are publicly visible. Public status pages you create are accessible to anyone with the link. Exercise caution when sharing information in public areas.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our service.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected] or visit our Contact Us page.