1. What Data We Collect
We collect the minimum data necessary to provide our monitoring service:
| Data Type | Examples | Purpose |
|---|
| Account info | Email address, display name | Authentication, communication |
| Monitor targets | URLs, IP addresses, hostnames, ports | Performing monitoring checks |
| Check results | Response times, HTTP status codes, screenshots | Uptime history, incident detection |
| Alert config | Telegram chat IDs, email addresses, webhook URLs, Slack channels | Delivering notifications |
| Usage data | IP address, browser type, pages visited | Security, abuse prevention |
2. How We Use Your Data
We use collected data to:
- Provide the Service: Run monitoring checks, detect incidents, and deliver alerts
- Send notifications: Alert you when monitors go down or recover, and deliver status page updates to subscribers
- Improve the product: Analyze aggregate usage patterns (not individual data) to improve reliability and features
- Communicate with you: Send account-related emails (billing, security, service updates)
- Prevent abuse: Detect and block malicious use of the platform
We do not sell your data to third parties. We do not use your data for advertising.
3. Data Storage & Security
Your data is stored on servers located in Europe and the United States. We implement industry-standard security measures:
- All data in transit is encrypted via TLS/HTTPS
- Passwords are hashed using bcrypt
- API keys are stored using one-way hashing
- Database backups are encrypted at rest
- Access to production systems is restricted and logged
While we take reasonable precautions, no system is 100% secure. We will notify affected users promptly in the event of a data breach.
4. Third-Party Services
To deliver the Service, we interact with the following third-party services:
- Telegram Bot API: To deliver alert notifications to your Telegram account. We send only alert content and your Telegram chat ID.
- Email delivery providers: To send alert emails, account notifications, and status page subscriber updates.
- Slack API: To deliver alert notifications to your Slack workspace, if configured.
- Payment processors: To handle paid plan subscriptions. We do not store full credit card numbers.
Each third-party service is governed by their own privacy policy. We share only the minimum data required for their function.
5. Cookies
We use cookies sparingly:
- Session cookie: Used for authentication after you log in. Essential for the Service to function. Expires when you log out or after 30 days.
We do not use tracking cookies, analytics cookies, or advertising cookies. We do not use any third-party tracking scripts.
6. Data Retention
- Monitoring history: Retained according to your plan (7 days for free, 30 days for Pro, 1 year for Business). Older data is automatically deleted.
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Server logs: Retained for up to 90 days for security and debugging purposes, then automatically purged.
- Backups: May contain your data for up to 30 days after deletion as part of our disaster recovery process.
7. Your Rights
You have the right to:
- Access: Request a copy of all data we hold about you
- Rectification: Correct inaccurate personal data
- Deletion: Delete your account and all associated data
- Export: Download your monitoring data (available via the API and dashboard)
- Restriction: Request that we limit processing of your data
- Objection: Object to processing of your data for specific purposes
- Portability: Receive your data in a structured, machine-readable format
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
8. GDPR Compliance
If you are located in the European Economic Area (EEA), the following applies:
- Legal basis: We process your data based on contractual necessity (to provide the Service you signed up for) and legitimate interest (to improve and secure the Service).
- Data controller: Alerto is the data controller for personal data collected through the Service.
- Cross-border transfers: Where data is transferred outside the EEA, we ensure appropriate safeguards are in place.
- Supervisory authority: You have the right to lodge a complaint with your local data protection authority.
9. Children's Privacy
The Service is not intended for users under 16 years of age. We do not knowingly collect data from children. If we learn that we have collected data from a child under 16, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Effective" date at the top
- Notify registered users via email
- Provide at least 30 days' notice before changes take effect
11. Contact
For privacy-related questions or requests, contact us at:
Email: [email protected]
For general support: [email protected]