Privacy Policy

1. Who We Are

UpCanary is operated by Algoventis GmbH, a company registered in Rehetobel, Switzerland. We provide automated uptime monitoring and status page services for businesses and developers.

Contact: [email protected]

2. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, and password hash when you create an account.
• Billing data: Payment information processed securely by our payment provider (Stripe). We do not store full credit card numbers.
• Usage data: Monitors you create, notification preferences, and service configuration.
• Analytics data: Anonymous, aggregated usage statistics collected via Umami (a GDPR-compliant, cookie-free analytics tool). No personal data or IP addresses are stored by our analytics.
• Communication data: Messages you send us via email or support channels.

3. How We Use Your Data

We process your data for the following purposes:

• Providing and operating the UpCanary service
• Sending uptime alerts and status notifications you have configured
• Processing payments and managing your subscription
• Communicating with you about your account or our service
• Improving our service, fixing bugs, and ensuring security
• Complying with legal obligations

4. Legal Basis for Processing

We process your personal data based on:

• Contract performance: Processing necessary to provide the service you signed up for.
• Legitimate interest: Analytics and service improvement, fraud prevention, and security.
• Legal obligation: Where required by Swiss or applicable EU law.
• Consent: For optional communications such as marketing emails, which you can withdraw at any time.

5. Cookies and Analytics

We only use cookies that are strictly necessary for the service to function, specifically for authentication and session management. We do not use any tracking cookies, advertising cookies, or third-party cookie-based trackers.

For website analytics, we use Umami, a privacy-focused, GDPR-compliant analytics tool. Umami does not use cookies, does not collect personal data, and does not track users across websites. All data is aggregated and anonymous.

6. Data Sharing

We do not sell your personal data. We share data only with the following categories of service providers, bound by data processing agreements:

• Cloud infrastructure providers (for hosting and data storage)
• Payment processors (Stripe, for billing)
• Email delivery services (for notifications and alerts)

7. Data Retention

We retain your account data for as long as your account is active. Monitoring logs and incident history are retained according to your plan's limits. When you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax purposes).

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

9. International Data Transfers

Our company is based in Switzerland, which the European Commission recognizes as providing an adequate level of data protection. Where data is processed outside Switzerland or the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

10. Your Rights

Under the Swiss Federal Act on Data Protection (FADP) and the GDPR (where applicable), you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority

To exercise any of these rights, contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at: