Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. Your name, email address, and password (stored only as a salted hash), together with the organization and team-membership records you create. If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Monitoring data. The websites and pages you add, and what our checks find when they visit them: response status and timing, certificate details (issuer, subject, validity dates, serial, fingerprint, and chain), DNS records, public domain registration data, and, for keyword and page change monitors, an excerpt of the page text you chose to watch. We also keep the history of checks and activity in your workspace.
• Alert configuration. The alert rules, notification channels, and recipient email lists you configure, including any Slack, Discord, Microsoft Teams, or webhook endpoints you supply.
• Billing information. Subscription and payment records. Card details are handled by Stripe and are never stored on our servers; we retain only the subscription status and identifiers Stripe returns.
• Technical data. Request metadata such as IP address and timestamps, used to operate the Service, secure it, and apply rate limits.
• Usage data. The pages you visit on our website and in the app, actions such as signing up or subscribing, errors you encounter, and session replays of how pages are used, with typed input masked. Once you sign in, this is linked to your name and email address.

2. How we use information

• To provide the Service — monitor certificates and deliver expiry alerts.
• To authenticate you, maintain your session, and secure your account.
• To process subscriptions and bill for usage.
• To respond to support requests and send service-related notices.
• To send onboarding emails about getting started with Upcheck. Each one has an unsubscribe link; unsubscribing does not stop alert or account emails.
• To understand how the website and app are used, fix errors, and improve the Service.
• To detect, prevent, and address abuse, fraud, and technical issues.

3. Service providers we share data with

We do not sell your personal information. We share data only with the processors needed to run the Service:

• Cloudflare — application hosting, database, background processing, and delivery of alert and account emails.
• Stripe — payment processing and subscription management.
• PostHog — product analytics, error tracking, and session replay, hosted in the EU.
• Sequenzy— onboarding email. We share your name, email address, and events such as signing up and adding a website, including the website’s hostname.
• Notification destinations you configure — when an alert fires, its contents are sent to the channels and addresses you have chosen (email, Slack, Discord, Teams, or webhook).

We may also disclose information where required by law or to protect the rights, safety, and security of Upcheck, our users, or the public.

4. Cookies and local storage

We use a cookie to keep you signed in. Our analytics stores an identifier in a cookie and in your browser’s local storage so that repeat visits can be recognised.

5. Data retention

We retain account, monitoring, and billing data for as long as your account is active. When you clear product data or delete your account, the associated records are removed, subject to any retention required for legal, accounting, or security purposes.

6. Security

Passwords are stored only as salted hashes, transport is encrypted with TLS, and access to production data is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update your profile and clear product data from within the app, or contact us to exercise any of these rights. You can also complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.

8. International transfers

Upcheck runs on globally distributed infrastructure, so your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate we will provide additional notice.

11. Contact

Questions about this policy or your data? Email us at support@upcheck.so or write to Cyber Studios Ltd, 124 City Road, London, EC1V 2NX, United Kingdom.