Privacy Policy

Velprove ("we," "us," or "our") operates the uptime monitoring service available at this website. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account Information

When you create an account, we collect your name and email address. If you subscribe to a paid plan, your billing information is collected and processed by our payment provider.

Monitor Configuration Data

We store the URLs, check intervals, assertion rules, and other configuration details you provide when setting up monitors. This includes HTTP headers, request bodies, and expected response criteria.

Monitoring Results

We collect and store the results of each monitoring check, including response status codes, response times, headers, and body content necessary for assertion validation. This data is used to determine uptime status and trigger alerts.

Browser Check Credentials

If you configure a Browser Login Check, we collect and store the login credentials (username and password) you provide for the third-party service being monitored. These credentials are encrypted using AES-256-GCM before storage and are never stored in plain text. They are used solely to execute automated login checks on your behalf.

Failure Screenshots

When a browser login check fails and you have enabled screenshot capture, we may capture and store a screenshot of the login page at the moment of failure. Screenshots are stored securely in encrypted cloud storage, accessible only to your account, and automatically deleted after 7 days.

Usage Data

We automatically collect basic usage data such as IP addresses, browser type, and pages visited within the application to maintain security and improve the service.

2. How We Use Your Information

• Providing the service: Running uptime checks, processing monitoring results, and displaying dashboards.
• Sending alerts: Delivering email, Slack, and webhook notifications when your monitors detect issues.
• Billing and account management: Processing payments, managing subscriptions, and communicating about your account.
• Service improvement: Analyzing aggregate usage patterns to improve reliability and develop new features.
• Running browser-based monitoring checks: Launching headless browsers to navigate to login pages, enter your provided credentials, and verify login success on third-party services you have configured for monitoring.
• Security: Detecting and preventing abuse, fraud, and unauthorized access.

3. Third-Party Service Providers

We share information with the following third-party providers only as necessary to operate the service:

• Neon— Database hosting. Your account data and monitoring results are stored in Neon-managed PostgreSQL databases.
• Resend— Email delivery. Your email address is shared with Resend to send alert notifications and account communications.
• Stripe— Payment processing. Billing details are handled directly by Stripe. We do not store your full credit card information on our servers.
• Slack— Notifications. If you configure Slack alerts, we send monitoring notifications to your specified Slack channels through the Slack API.
• Cloudflare— Object storage. Failure screenshots from browser login checks are stored in Cloudflare R2 and automatically deleted after 7 days.

We do not sell your personal information to any third party.

4. Data Retention

We retain different categories of your data for different periods depending on your subscription plan.

Account Information

We retain your account information (name, email address, and account settings) for as long as your account remains active and for up to 30 days after account deletion, except where longer retention is required by applicable law (for example, billing records kept for tax or accounting purposes).

Monitoring Data

Each time we run a check on one of your monitors, we record the result. This data is retained based on your plan:

• Detailed check results contain the full technical record of each individual check (response time, status code, assertion outcomes).
• Failure logs contain error details and diagnostic information recorded when a monitor detects a problem, including any failure screenshots.
• Historical summaries are aggregated performance statistics (such as hourly uptime percentages and average response times) that allow you to review trends after detailed results have been removed.

Data After Expiry

When a retention period expires, the corresponding data is permanently deleted through automated processes. Deletion typically occurs within 24 hours for detailed check results and failure logs.

Account Deletion

When you delete your account, we remove all of your personal information and monitoring data within 30 days, except where retention is required by law. After deletion, we may retain anonymized, aggregated data that cannot be used to identify you.

Plan Downgrades

If you downgrade to a lower-tier plan, data that exceeds the retention limits of your new plan will be deleted in accordance with the new plan's retention schedule. We will provide reasonable notice before any such deletion takes effect.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and encryption at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update your account information at any time through your account settings.
• Deletion: You can request deletion of your account and all associated data by contacting us or using the account deletion option in your settings.
• Export: You can export your monitoring data at any time through your account dashboard. We recommend exporting any data you wish to retain before the applicable retention period expires, as deleted data cannot be recovered.
• Objection: You can object to certain processing of your data where we rely on legitimate interests.

To exercise any of these rights, contact us at privacy@velprove.com.

7. Cookies

We use essential cookies to maintain your authenticated session and remember your preferences. We do not use third-party tracking or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@velprove.com.