Privacy Policy

Last Updated: January 4, 2026

1. Introduction

UptimeKarma ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our uptime monitoring service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

Account Information: Name, email address, and password when you register
Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
Monitor Configuration: URLs, endpoints, and settings for the services you want to monitor
Contact Information: Email addresses or phone numbers for receiving alerts

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

Monitoring Data: Response times, status codes, uptime/downtime events, and performance metrics from your monitored services
Usage Data: How you interact with our Service, features used, and preferences
Device Information: IP address, browser type, operating system, and device identifiers
Log Data: Server logs, error reports, and diagnostic information

2.3 Security Scan Data

When you use our security monitoring features, we collect:

SSL/TLS certificate information
Security headers and configurations
Vulnerability scan results
DNS and domain information

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To monitor your websites and services, send alerts, and generate reports
Account Management: To create and manage your account, process payments, and provide customer support
Service Improvement: To analyze usage patterns, improve our features, and develop new functionality
Communication: To send service updates, security alerts, and respond to your inquiries
Security: To detect and prevent fraud, abuse, and security incidents
Legal Compliance: To comply with legal obligations and enforce our Terms of Use

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

Stripe: Payment processing (subject to Stripe's privacy policy)
Email Services: For sending monitoring alerts and account notifications
Infrastructure Providers: Cloud hosting and data storage services

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

Valid legal requests from government authorities
Court orders or subpoenas
Protection of our rights, property, or safety
Prevention of fraud or illegal activities

5. Data Security

We implement industry-standard security measures to protect your information:

Encryption: All data is encrypted in transit (TLS/SSL) and at rest
Access Controls: Strict authentication and authorization mechanisms
Regular Audits: Periodic security assessments and vulnerability testing
Secure Infrastructure: Hosted on secure, SOC 2 compliant cloud platforms

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

Account Data: Retained while your account is active and for a reasonable period after deletion
Monitoring Data: Retained according to your subscription plan (typically 30-365 days)
Payment Records: Retained for tax and accounting purposes as required by law

You can request deletion of your data by contacting us or deleting your account through the dashboard.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal information
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal information
Portability: Receive your data in a structured, machine-readable format
Objection: Object to certain processing of your information
Withdrawal: Withdraw consent for data processing

To exercise these rights, please contact us through your account settings or our support channels.

8. Cookies and Tracking

We use cookies and similar technologies to:

Maintain your session and authentication state
Remember your preferences and settings
Analyze usage patterns and improve our Service

You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

9. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will promptly delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated policy on this page
Updating the "Last Updated" date
Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR):

Legal Basis: We process your data based on contract performance, legitimate interests, and consent
Data Protection Officer: You can contact our DPO for privacy-related inquiries
Right to Lodge Complaint: You have the right to lodge a complaint with a supervisory authority

14. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information (we do not sell your information)
Right to deletion of personal information
Right to non-discrimination for exercising privacy rights

15. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Through your account dashboard
Via our support channels
By email (contact information available on our website)