Privacy Policy

1. Introduction

UptimeVanguard ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website monitoring service at uptimevanguard.com and app.uptimevanguard.com.

We process personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws.

2. Data Controller

For monitoring data entrusted to us by your organisation, our proposed processor terms are in the draft Data Processing Agreement.

The data controller for your personal data is:

UptimeVanguard
Registered address not configured
The Netherlands
Chamber of Commerce (KvK) no.: 42017143
VAT ID: not configured
privacy@uptimevanguard.com

3. What Data We Collect

3.1 Account Data

When you register, we collect:

• Name
• Email address
• Password (stored securely hashed)

3.2 Service Data

When you use the Service, we collect:

• URLs and domains you add for monitoring
• Monitoring configuration (check types, intervals, notification preferences)
• Monitoring results (response times, status codes, uptime data)
• Notification channel configurations (email addresses, webhook URLs, Slack/Discord/Telegram identifiers)

3.3 Payment Data

Payment processing is handled by Mollie. We store:

• Mollie customer ID
• Subscription status and plan details
• Billing history

We do not store your full credit card number. Mollie handles all sensitive payment data as an independent controller under its own Privacy Policy. See section 6.1.

3.4 Technical Data

We automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and actions taken within the application

4. How We Use Your Data

We use your personal data for the following purposes:

5. Cookies

We use minimal cookies:

• Session cookie — Required for authentication and application functionality. This is a strictly necessary cookie and does not require consent.
• CSRF token cookie — Required for security (prevents cross-site request forgery).

We do not use advertising cookies or third-party tracking cookies. If we introduce analytics in the future, we will update this policy and obtain consent where required.

6. Third-Party Processors

We share personal data with the following third-party service providers who process data on our behalf:

These processors act on our instructions and are bound by data processing agreements. Where a processor is established outside the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses or on an equivalent safeguard under Chapter V of the GDPR.

6.1 Payment provider

Mollie B.V. (Netherlands), together with its group companies, handles our payments. For the payment data you enter, Mollie acts as an independent controller under its own privacy policy — it is not our processor, and we cannot instruct it on how that data is used. We receive from Mollie only a customer identifier, your subscription status and your billing history. See the Mollie Privacy Policy for how Mollie uses your data and for the transfer safeguards it applies.

6.2 Monitoring nodes

Our monitoring nodes run at several hosting providers worldwide. They receive the address you asked us to check and return the result. They hold no account data. Section 11 explains this further.

7. Data Retention

• Account data: Retained while your account is active, deleted upon account deletion request
• Monitoring data: Pruned by a daily task using the configured monitoring retention period (90 days by default). Large backlogs and asynchronous analytics deletion can delay physical removal
• Billing records: Retained for 7 years after the transaction as required by Dutch tax law
• Server logs: Application audit and request logs default to 365 days, notification history to 30 days and security events to 90 days. Operators can configure these periods; infrastructure logs and backup expiry are managed separately

8. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate data
• Right to erasure ("right to be forgotten") — Request deletion of your personal data
• Right to restriction — Request that we limit processing of your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interest
• Right to withdraw consent — Where processing is based on consent, withdraw at any time

To exercise any of these rights, contact us at privacy@uptimevanguard.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. Account Deletion

You can delete your account at any time through your account settings or by contacting support@uptimevanguard.com. When you delete your account:

• Your personal data and monitoring configuration will be permanently deleted
• Analytics deletion requests are queued for the deleted sites. ClickHouse removes those rows asynchronously; completion must be verified.
• Billing records will be retained as required by law (see Section 7)
• Billing records or an active subscription may require support-assisted cancellation and deletion before account removal can finish.

Contact support for the deletion timetable, confirmation of analytics removal and the applicable backup expiry. Account deletion alone does not confirm erasure of every retained copy.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure password hashing
• Access controls and authentication
• Regular security updates
• Rate limiting and bot protection on sign-in and registration
• Two-factor authentication available on every account

11. International Transfers

All data is stored on servers located in the European Union (Hetzner, Germany). Our monitoring network includes polling nodes located outside the EU that perform uptime checks — these nodes only initiate connections to your websites and transmit check results back to our EU servers. No personal data is stored on polling nodes. Cloudflare, our DNS and outbound email provider, and Mollie, our payment provider, may process data outside the EEA. For Cloudflare we rely on the European Commission's Standard Contractual Clauses. Mollie acts as an independent controller for payment data and applies its own transfer safeguards, as described in its privacy policy.

12. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification at least 30 days before they take effect. The "Effective date" at the top will always reflect the latest version.

14. Contact

For privacy-related questions or to exercise your data rights, contact us at:

UptimeVanguard
Registered address not configured
The Netherlands
Chamber of Commerce (KvK) no.: 42017143
VAT ID: not configured
privacy@uptimevanguard.com

For general support questions, contact support@uptimevanguard.com.