Privacy Policy
Last updated: June 2025
1. Information We Collect
We collect the following information when you use StatusAlert:
- Account information (name, email) provided during registration via our Identity service.
- Organisation and team membership data.
- Monitor configurations (URLs, hostnames, connection strings — encrypted at rest).
- Monitor check results (status, response times, error messages).
- Incident and maintenance records you create.
- Alert channel configurations (email addresses, webhook URLs, Slack endpoints — encrypted at rest).
2. How We Use Your Information
We use collected information to:
- Provide and maintain the monitoring service.
- Send alert notifications when monitors change status.
- Generate uptime reports and analytics.
- Display public status pages for your subscribers.
- Improve the Service and develop new features.
3. Data Security
All sensitive data — including database connection strings, API keys, and webhook URLs — is encrypted at rest using AES-256-GCM encryption. Data in transit is protected via TLS. Access to production systems is restricted to authorised personnel.
4. Data Retention
Monitor check history is retained based on your organisation's configured retention period (default: 90 days). Older data is automatically purged. Account and organisation data is retained for the lifetime of your account.
5. Data Sharing
We do not sell your data. We do not share your data with third parties except:
- When required by law or legal process.
- To protect the rights, property, or safety of STEPlus, our users, or the public.
- With service providers who assist in operating the platform (e.g. database hosting, email delivery).
6. Public Status Pages
If you enable a public status page, the component names, current status, uptime history, and incident details you choose to display will be publicly accessible. Subscriber email addresses are stored securely and used only for status notifications.
7. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting us. You may export your monitoring data at any time via the reporting features.
8. Cookies
StatusAlert uses local storage for authentication tokens and user preferences. We do not use third-party tracking cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification.
10. Contact
For privacy-related inquiries, contact us at support@steplus.co.