Privacy Policy

1. Information We Collect

Account Information

When you register for Watchtower, we collect:

• Email address and password (authentication credentials)
• Name or display name (optional)
• Billing information processed through our payment provider (we do not store card numbers)

Monitor Configuration

To provide the Service, we store the configuration you provide:

• URLs and endpoints you submit for monitoring
• Check intervals, timeout thresholds, and HTTP method settings
• Alert contact details (email addresses, webhook URLs, Slack/Discord channel identifiers)
• Expected status codes and response body assertions

Monitoring Data

As part of running your monitors, we collect and store:

• HTTP response codes, response times (latency in ms), and body payloads where configured
• Probe results from each region — timestamp, outcome, and duration
• Incident records: start time, duration, affected monitors, resolution timestamps
• Historical uptime percentages and response time trends

Usage and Technical Data

We automatically collect certain technical information when you access the Service:

• IP address, browser type and version, operating system
• Pages visited within the dashboard, features used, and session duration
• Error logs and crash reports to diagnose service issues

2. How We Use Your Information

We use the information we collect to:

• Operate the Service: Execute monitoring checks, detect downtime, and trigger alerts on your behalf
• Send notifications: Deliver incident alerts, recovery notices, and weekly uptime digests to your configured contacts
• Improve reliability: Analyze performance data to optimize probe infrastructure and reduce false positives
• Communicate with you: Send product updates, maintenance notices, and respond to support requests
• Billing: Process payments and send invoices
• Legal compliance: Meet obligations under applicable laws and respond to lawful requests

We do not sell your personal information or the monitoring data you generate to third parties.

3. Data Sharing

We share your information only in the following circumstances:

• Service providers: We use trusted vendors to operate the Service, including cloud infrastructure (Cloudflare), database hosting (Supabase/PostgreSQL), and payment processing (Stripe). These providers are contractually required to protect your data and may only use it to provide services to us.
• Legal requirements: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Vantaj, our users, or the public.
• Business transfers: If Vantaj is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

4. Data Retention

We retain your account data for as long as your account is active. Monitoring data (check history, incidents, response times) is retained for 90 days on the free plan and up to 1 year on paid plans, after which it is automatically purged.

When you delete your account, we delete your personal information and monitoring configuration within 30 days, except where we are legally required to retain records (e.g., billing records for tax purposes, retained for up to 7 years).

5. Cookies and Tracking

We use a minimal set of cookies:

• Authentication cookies: Required to keep you signed in across sessions. These are strictly necessary and cannot be disabled.
• Preference cookies: Remember your dashboard settings (theme, layout preferences).
• Analytics: We may use privacy-respecting, cookieless analytics to understand aggregate usage patterns. No personally identifiable information is sent to analytics providers.

We do not use advertising cookies or share browsing data with ad networks.

6. Data Security

Watchtower uses TLS encryption for all data in transit, encrypted storage at rest, and access controls that limit who within Vantaj can access production data. Authentication is managed through Supabase with industry-standard hashing for passwords.

No method of electronic transmission or storage is 100% secure. We will notify affected users without undue delay in the event of a data breach that affects your personal information.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your account and associated data
• Portability: Receive your monitoring configuration and incident history in a machine-readable format
• Restriction: Request that we limit processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. European Users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, the following applies:

• Legal basis for processing: We process your data on the basis of (a) contract performance — to provide the Service you signed up for; (b) legitimate interests — to improve reliability and prevent abuse; and (c) your consent where explicitly requested.
• Data transfers: Your data may be processed in the United States and other countries where our infrastructure providers operate. We rely on Standard Contractual Clauses and other appropriate safeguards for cross-border transfers.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

Watchtower is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Third-Party Links

The Service may contain links to third-party websites (e.g., integrations documentation, payment portals). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via a prominent notice in the dashboard at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact

If you have any questions or concerns about this Privacy Policy, please contact us:

• Email: [email protected]
• Company: Vantaj