Privacy Policy

Last updated: September 26, 2026

At Uptify, we are committed to safeguarding your privacy and ensuring responsible data handling. This Privacy Policy outlines what information we collect, why we collect it, how it is stored, how long it is retained, and your rights regarding your personal data.

1. Data Minimization & Information We Collect

We strictly practice data minimization—we collect only information that is genuinely necessary to deliver uptime monitoring, status reporting, and developer documentation services:

  • Account Identifiers: Email address, username, hashed password, and optional Discord ID (only if you choose to link Discord for real-time outage alerts).
  • Infrastructure Telemetry & Target Data: The hostnames, IP addresses, URLs, port numbers, ping intervals, and incident messages you configure for your monitors.
  • Feedback & Documentation Submissions: Customer suggestion posts, upvote records, and feedback ratings submitted on public project pages.
  • Diagnostic Logs: Ephemeral server request records, latency metrics, and IP addresses used solely for automated DDoS mitigation, rate limiting, and uptime calculation.

2. Purpose & Legal Basis of Processing

We process your data strictly for legitimate operational purposes:

  • Authenticating access to your administrative project dashboards.
  • Executing automated uptime probes and dispatching incident alerts via Email or Discord.
  • Preventing spam, abuse, and brute-force attacks on our public APIs and feedback boards.
  • Fulfilling legal obligations and responding to verified regulatory inquiries.

3. Data Retention Period

We retain your personal data only as long as necessary:

  • Active Accounts: Retained while your account remains open. If you delete your account, your personal credentials and associated monitors are permanently purged from active tables.
  • Uptime Probes & Latency Records: Kept on a rolling retention cycle (typically 30 to 90 days depending on your account tier, extending up to 365 days for audit retention).
  • Security Audit Logs: Kept for up to 90 days for forensic inspection and threat mitigation.

4. Third-Party Integrations & Sub-Processors

We do not sell, rent, or trade your personal data. We disclose data solely to infrastructure providers required to operate our service:

  • Cloud Infrastructure: VPS hosting and database nodes with encrypted transit and storage.
  • Transactional Email: SMTP gateways (Nodemailer) for delivering authentication OTPs and downtime notifications.
  • Discord API: Optional webhook integration for operators requesting incident alerts to their Discord servers.
  • Groq AI: Sanitized documentation formatting and RAG queries (no user credentials or secrets are sent to AI models).

5. Compliance Considerations under DPDP Act, 2023 (India)

Uptify respects applicable personal data protection laws, including considerations under India's Digital Personal Data Protection Act, 2023 (DPDP Act):

  • Notice & Consent: We provide transparent notice of data collection purposes and obtain verifiable consent upon account registration.
  • Right to Correction & Erasure: You can edit your profile details or request complete erasure of your personal data through your Account Console or by contacting our Data Protection Officer.
  • Right to Grievance Redressal: If you have concerns regarding how your data is handled, you may submit a formal inquiry to our grievance contact listed below.
  • Protection of Children: Uptify is directed toward developer and organizational infrastructure operators. We do not knowingly track or process personal data of minors.

6. Cookies & Local Storage

We use only strictly necessary authentication cookies and functional local storage items. For detailed disclosures, view our Cookie Policy.

7. Data Security & Storage

We employ industry-standard administrative, physical, and technical safeguards, including bcrypt password hashing, JWT cryptographic signatures, and role-based access controls. While no electronic transmission is 100% impenetrable, we continually audit our endpoints against unauthorized access.

8. Contact & Grievance Redressal

For privacy inquiries, rights requests, or grievance redressal, contact our team at: [email protected].