1. Who we are and what this covers
This Privacy Policy explains how Website Monitor AI LLC ("we", "us"), the operator of Website Monitor at websitemonitor.ai (the "Service"), collects, uses and shares personal data when you visit our website, create an account or use the Service. It applies to everyone who uses the Service, wherever they live.
It does not cover the websites you monitor through the Service, or third-party platforms you connect to it (such as Slack, Discord or Telegram). Those have their own privacy policies.
By using the Service you agree to the practices described here. This Policy is part of our Terms of Service.
2. What we collect
We collect only what we need to run the Service and keep it secure.
- Account data: your name, email address, a hashed version of your password (never the password itself), your plan, your language and display preferences, and the alert channels you configure (for example an email address, a Slack webhook URL or a phone number).
- Sign-in provider data: if you sign in with a third-party identity provider such as Google, we receive and store the provider's stable account identifier, your name, your email address and, if available, your profile picture URL. We do not receive your provider password and we do not get access to anything else in that account.
- Monitoring data: the URLs you add, their settings, and the result of every check (timestamp, HTTP status, response time, error text). Raw check logs are kept for a limited period and then aggregated into statistics.
- Billing data: handled by Stripe. We store your Stripe customer and subscription identifiers and the type of payment method (for example "card ending 4242"), never full card numbers.
- Security and usage data: IP address, browser user agent, and an activity log of significant account actions (sign-in, password reset, plan changes, admin actions) so we can secure accounts and investigate abuse.
- Support data: when you use the Support form we store the message, your name and email, the page you were on, your IP address and the result of the human verification, and we send you a copy by email.
- Technical data: standard server logs (IP address, requested URL, time, user agent, status) kept for a short period for security and troubleshooting.
We do not knowingly collect data from children. The Service is intended for people aged 18 or over.
3. How we use it
We use personal data to:
- Provide the Service: run your monitors, show you results, and send the alerts and emails you asked for.
- Authenticate you and keep your account secure, including detecting and preventing abuse.
- Bill you and manage your subscription.
- Answer your messages and provide support.
- Send transactional and service emails (alerts, password reset, billing receipts, important changes to the Service or to this Policy). Product-update emails are optional and you can turn them off in Settings.
- Understand how the Service is used, in aggregate, so we can improve it.
- Comply with legal obligations and enforce our Terms.
We do not sell personal data, we do not share it with data brokers, and we do not use it for third-party advertising. We do not use your data to train AI models.
Legal bases (for people in the EEA, UK and similar jurisdictions): performance of our contract with you, our legitimate interests in running and securing the Service, your consent where we ask for it (for example optional emails), and compliance with legal obligations.
5. International transfers
Our servers are in the European Union. Some of our providers (Stripe, Resend, Cloudflare, identity providers) process data in the United States and elsewhere. Where data leaves the EEA or the UK, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or the provider's participation in an adequacy framework.
7. How long we keep it
- Account data: for as long as your account exists, and deleted within 30 days after you close it.
- Monitoring data: raw check logs are kept for a limited period that depends on your plan and then rolled up into aggregated statistics, which do not identify individual requests.
- Billing records: kept as long as tax and accounting law requires, typically 7 years.
- Security and activity logs: kept for a limited period to investigate abuse, then deleted.
- Support messages: up to 24 months.
When you delete your account, your monitors, check logs, status pages and API keys are deleted immediately and your Stripe subscription is cancelled. Backups are rotated within 14 days.
8. How we protect it
All traffic to the Service is encrypted with TLS. Passwords are stored as salted bcrypt hashes. Access to production systems is limited to the people who operate the Service and protected by SSH keys. Sign-in attempts and password resets are rate limited. We keep encrypted daily backups.
No system is perfectly secure. If we learn of a breach that affects your personal data, we will notify you and the relevant authorities as the law requires.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a copy of it in a portable format, and to withdraw consent at any time. We honour these rights under the GDPR, the UK GDPR, the California Consumer Privacy Act and comparable laws, for everyone, regardless of location.
Most of this you can do yourself:
- View and update your profile, email and preferences in Settings.
- Export the check logs of each monitor from its page.
- Turn optional emails on or off in Settings.
- Delete your account, and everything in it, from Settings. This is immediate and irreversible.
For anything else, including requests about data we hold about you, use the Support form linked in the footer of every page or email support@websitemonitor.ai. We answer within 30 days. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.
We do not discriminate against you for exercising any of these rights.
10. Changes to this Policy
We may update this Policy as the Service evolves. When we do, we will change the "effective" date at the top and, for material changes, notify you by email or with a notice in the app before they take effect. The current version is always available at this address.
11. Contact
Website Monitor is operated by Website Monitor AI LLC, a limited liability company organized in the State of Kansas, United States. For privacy questions or requests, use the Support form in the footer or email support@websitemonitor.ai.