Privacy Policy

1. Introduction

StatusKit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API status page and monitoring service ("Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide when using our Service:

• Account Information: Name, email address, and password when you create an account
• Service Configuration: API endpoints, OpenAPI specifications, service names, and monitoring settings
• Incident Data: Incident reports, updates, and maintenance schedules you create
• Payment Information: Billing details processed securely through our payment provider (Stripe)
• Communications: Messages and feedback you send to us

2.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Usage Data: Pages visited, features used, and actions taken within the Service
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Monitoring Data: Response times, status codes, and availability metrics from your monitored endpoints

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how you use our Service. You can control cookies through your browser settings.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: Operate, maintain, and deliver the features you request
• Account Management: Create and manage your account, process payments, and provide customer support
• Monitoring: Execute health checks on your configured endpoints and generate status reports
• Notifications: Send alerts about incidents, maintenance, and status changes to you and your subscribers
• Improvements: Analyze usage patterns to improve and develop new features
• Security: Detect, prevent, and address technical issues and security threats
• Communications: Send important updates about the Service, your account, and policy changes
• Legal Compliance: Comply with legal obligations and enforce our terms

4. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third-party vendors who help us operate the Service (e.g., hosting, payment processing, email delivery)
• Public Status Pages: Information you choose to display on your public status page is accessible to anyone
• Team Members: With users you invite to your organization or service
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect the rights, property, or safety of StatusKit, our users, or others

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Monitoring Data: Retained according to your subscription plan (7 days for Free, 90 days for Pro)
• Incident History: Retained as long as your account is active
• Payment Records: Retained as required for tax and legal compliance

You may request deletion of your account and associated data at any time.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure password hashing
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure infrastructure hosted on reputable cloud providers

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us through our GitHub repository.

8. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• Stripe: Payment processing - Stripe Privacy Policy
• Your Monitored APIs: We make requests to endpoints you configure; responses are processed according to this policy

We encourage you to review the privacy policies of any third-party services you use.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our GitHub repository.