Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. Your name, email address, and password (stored only as a salted hash), together with the organization and team-membership records you create.
• Monitoring data. The website hostnames you add, and the certificate details we retrieve for them (issuer, subject, validity dates, serial, fingerprint, and chain), along with the history of checks and activity in your workspace.
• Alert configuration. The alert rules, notification channels, and recipient email lists you configure, including any Slack, Discord, Microsoft Teams, or webhook endpoints you supply.
• Billing information. Subscription and payment records. Card details are handled by Stripe and are never stored on our servers; we retain only the subscription status and identifiers Stripe returns.
• Technical data. Request metadata such as IP address and timestamps, used to operate the Service, secure it, and apply rate limits.

2. How we use information

• To provide the Service — monitor certificates and deliver expiry alerts.
• To authenticate you, maintain your session, and secure your account.
• To process subscriptions and bill for usage.
• To respond to support requests and send service-related notices.
• To detect, prevent, and address abuse, fraud, and technical issues.

3. Service providers we share data with

We do not sell your personal information. We share data only with the processors needed to run the Service:

• Cloudflare — application hosting, database, background processing, and transactional alert email delivery.
• Stripe — payment processing and subscription management.
• Notification destinations you configure — when an alert fires, its contents are sent to the channels and addresses you have chosen (email, Slack, Discord, Teams, or webhook).

We may also disclose information where required by law or to protect the rights, safety, and security of Upcheck, our users, or the public.

4. Data retention

We retain account, monitoring, and billing data for as long as your account is active. When you clear product data or delete your account, the associated records are removed, subject to any retention required for legal, accounting, or security purposes.

5. Security

Passwords are stored only as salted hashes, transport is encrypted with TLS, and access to production data is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update your profile and clear product data from within the app, or contact us to exercise any of these rights.

7. International transfers

Upcheck runs on globally distributed infrastructure, so your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate we will provide additional notice.

10. Contact

Questions about this policy or your data? Email us at support@upcheck.so.