Privacy Policy

1 Information We Collect

We only collect data necessary to provide automated uptime monitoring, latency tracking, and incident alerting services:

• Account & Identity Data: When registering, we collect your email address and an encrypted hash of your password. If signing in with Google OAuth, we receive your email and verified user ID under the minimal openid email scope. We never request access to your contacts, Google Drive, or any other Google services.
• Monitoring Targets: The endpoint URLs, hostnames, HTTP request methods (GET, HEAD, POST), custom check frequencies, and alert recipient emails that you configure.
• Diagnostic Ping Telemetry: Automated check results including HTTP status response codes (e.g. 200, 404, 502), round-trip response time latency in milliseconds, timestamps, and error messages generated during network connection failures or timeouts.

2 How We Use Your Information

We process your data strictly to execute the operational monitoring features you request:

• To execute scheduled automated ping checks against your configured endpoints.
• To calculate latency averages, uptime percentages, and response reliability curves.
• To dispatch instant alert and recovery notifications to your verified account email (or custom designated team email on the Max tier) when an endpoint goes down or recovers.
• To render your private dashboard and generate endpoint incident and performance reports.
• To enforce fair usage quotas associated with your active subscription tier (Free, Pro, or Max).

3 Administrative Privacy Isolation

Unlike conventional platforms where staff can inspect private configurations, Monitorit strictly restricts administrative dashboards. Platform administrators can only see high-level numerical aggregates:

4 Public Incident & Health Reports

Reports record the historical status codes, response times, and failure traces of an endpoint.

• Private by Default: All endpoint reports are private and only viewable by you when signed into your account.
• Shareable Public Links (Pro & Max): If you choose to enable public sharing (Make report publicly shareable), a cryptographically randomized token URL is generated. Anyone with this specific link can view that endpoint's uptime ratio, latency history, and status checks without logging in. You may revoke public access at any time by toggling this setting off.

5 Third-Party Subprocessors

We work with trusted infrastructure providers to deliver high availability and secure execution:

• Google Identity: Authenticates users opting to sign in via Google OAuth.
• Database & Cloud Infrastructure: Data is persisted in PostgreSQL databases secured with encryption in transit and at rest.
• Transactional Email Dispatch: Alert notifications are dispatched through secured REST API mail gateways without advertising trackers or third-party behavioral profiling.

6 Data Retention & Permanent Deletion

You have full ownership of your data. You may delete any monitored endpoint and its associated scan logs at any time directly through your dashboard.

If you wish to permanently delete your entire user account, you can initiate a self-service deletion request in your Account Settings or email us directly at sahildeowork@gmail.com. Upon confirmation, your account, all monitored endpoints, historical ping logs, and notification records are permanently and irrevocably deleted from our database.

7 Security Safeguards

We implement industry-standard administrative, physical, and technical safeguards. Passwords are encrypted using salted bcrypt hashing. User sessions are verified using cryptographically signed JSON Web Tokens (JWT) stored in HTTP-only, SameSite cookies to protect against cross-site scripting (XSS) and cross-site request forgery (CSRF).