Privacy Policy

We collect only what we need to run the service:

• Account details — your name and email address, and either a password (stored only as a salted hash, never in plain text) or, if you use Google Sign-In, the basic Google profile described below.
• Monitoring data — the site URLs you add and the results of each check (up/down status, response time, HTTP status, SSL certificate details) and your incident history.
• Alert contact details — phone numbers you verify (for SMS and voice alerts) and any Slack webhook you configure.
• Technical data — IP address and basic browser information, plus a login token kept in your browser's local storage to keep you signed in.

• To monitor your sites and deliver alerts by email, SMS, voice call, and Slack.
• To create and secure your account and provide the dashboard.
• To operate, maintain, and improve the service.
• To contact you about important service or security matters.

We do not sell your personal information, and we do not use it for advertising.

If you sign in with Google, we receive your basic Google profile — your name, email address, and profile picture — solely to create and authenticate your account. We do not request or access any other Google data, and NotifyUp's use of information received from Google APIs adheres to Google's applicable use requirements.

We share data only with the infrastructure providers needed to run NotifyUp, each acting on our behalf:

• DigitalOcean — application hosting and managed databases.
• Amazon Web Services (SES) — sending email.
• Twilio — SMS and voice-call alerts, and phone-number verification.
• Google — sign-in / authentication.
• Cloudflare — DNS and content delivery.

We may also disclose information if required by law.

Response-time and check history is retained for approximately 90 days. Your account and monitor configuration are kept until you delete your account, after which we remove your personal data within a reasonable period, except where we must retain it to meet legal obligations.

Traffic is encrypted in transit with HTTPS/TLS, passwords are stored as salted hashes, and our managed databases are encrypted at rest with restricted access. No system is perfectly secure, but we work to protect your data using industry-standard measures.

You can access and update most of your information from your dashboard. To request a copy of your data or ask us to correct or delete it, email [email protected] and we'll respond within a reasonable time.

NotifyUp is not directed to children under 16, and we do not knowingly collect their personal information.

We may update this policy from time to time. We'll revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Questions about this policy? Email us at [email protected].