Privacy Policy

1. Introduction

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data.

2. Data Controller

The data controller is LaunchX GmbH, the company behind UptimeEye. For privacy-related inquiries, contact us at: contact@uptimeeye.com.

3. Hosting and Infrastructure

Hosting: Our frontend and backend services are hosted on Hetzner servers in Germany.
Backups: Encrypted backups of our database are stored with Amazon Web Services (AWS) in Frankfurt, Germany (Amazon S3, region eu-central-1).
Check probes: Our probes run at six locations. The location eu-central-1 runs on our Hetzner servers in Falkenstein, Germany. The five locations outside the EU (us-east-1, us-west-2, ap-southeast-1, ap-southeast-2 and sa-east-1) run on Amazon Web Services (AWS) in the United States, Singapore, Australia and Brazil. For monitors that use those locations, AWS processes the monitor configuration, including secure variables, and the check responses. Results are sent back and stored in Germany. Monitors that use only eu-central-1 are checked only from our hosting in Germany and are never sent to a probe outside the EU.
Payments: We use Stripe to process payments. Stripe may process your payment data according to their privacy policy.

4. Personal Data We Collect

Account Information: Name, email address, and password.
Usage Data: API requests, monitors, and scheduled tasks.
Technical Data: IP address, browser type, and operating system.
Payment Data: Processed by Stripe, we do not store your payment details.

5. Log Data You Send to UptimeEye Logs

If you use UptimeEye Logs, you send us the log output of your own systems. We store it so that you can search it. Log data frequently contains personal data of your users (for example IP addresses, user identifiers, e-mail addresses or request details). For this data you are the controller and we act as your processor under Art. 28 GDPR; a data processing agreement is available on request at contact@uptimeeye.com.

Where: Log data is stored exclusively on our own servers at Hetzner Online GmbH in Falkenstein, Germany. It is not transferred to any third country and no third-party service processes its content.
Isolation: Each organization has its own isolated tenant. Ingest keys can only write; reading requires a signed-in member of the organization.
Retention: Log data is kept for the period of your plan — currently 3 days (Free), 7 days (Pro) or 15 days (Agentur) — and is removed automatically afterwards. Physical storage is reclaimed within 31 days at the latest.
Deletion: When you delete an organization, we queue the deletion of its entire log tenant immediately and remove the data from our storage; this normally completes within an hour. We keep no backups of log data.
Your responsibility: Please do not send us data you are not permitted to process, and mask secrets and special categories of personal data before shipping logs.

6. Legal Basis for Processing

Consent: When you use our service, we may ask for your consent to process your data for specific purposes.
Contractual Necessity: To provide our service, we may need to process your personal data.
Legal Obligation: We may process your data to comply with legal regulations, such as tax or accounting obligations.

7. Data Security

We use security measures to protect your data, but no system is 100% secure. We cannot guarantee absolute security. However, we continuously monitor and improve our security practices.

8. Third-Party Services

We may share your data with trusted third-party services such as Stripe (payments), Clerk (authentication and user management), Resend (transactional and alert emails) and AWS (encrypted database backups in Frankfurt, Germany, and check probes outside the EU, only for monitors that use those locations). Clerk (United States) processes your name, email address, login and session data. Resend (United States) sends our transactional and alert emails and processes the recipient address and the alert content, such as the monitor or task name, status and time. Clerk, Resend and AWS process this data on our behalf as processors, bound by data processing agreements with appropriate safeguards. For every organization we create a Stripe customer record with the name of the organization, including on the Free plan without a subscription; payment data is processed only if you take out a subscription. Stripe processes payment data as an independent controller under its own privacy policy.

9. Data Transfers to Third Countries

Some of the services we use, such as AWS, Clerk, Resend and Stripe, transfer your personal data outside the European Economic Area (EEA). AWS runs our check probes at the locations outside the EU, in the United States, Singapore, Australia and Brazil, and receives the configuration and check responses of monitors that use those locations. Clerk (authentication and user management), Resend (transactional and alert emails) and Stripe (payments and the customer record of your organization) receive data in the United States. The current list of subprocessors is on our Trust & Security page. We ensure that any such transfers comply with applicable data protection laws: they are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs).

10. Retention of Your Data

We retain your personal data for as long as necessary to provide our services and to comply with legal obligations. The retention period varies depending on the type of data and the purpose of processing. If you request deletion of your data, we will comply, unless we are required by law to retain certain data.

11. Your Rights

As a user, you have the following rights regarding your personal data:

Right to access: You can request information about the personal data we process about you.
Right to rectification: You can request corrections or updates to your personal data.
Right to deletion: You can request that we delete your personal data.
Right to restrict processing: You can request that we limit the processing of your personal data.
Right to data portability: You can request a copy of your data in a structured, commonly used format.
Right to object: You can object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at contact@uptimeeye.com.

If you believe that we are processing your data unlawfully, you also have the right to lodge a complaint with the relevant supervisory authority (Art. 77 GDPR).

12. Automated Decision Making and Profiling

We do not use automated decision-making processes or profiling that have legal effects or significantly affect you.

13. Use of Cookies

We use cookies to ensure the proper functioning of our website and provide you with a seamless experience. Specifically, we use the following types of cookies:

Session Cookies: These cookies are necessary for the proper functioning of the website, such as maintaining your logged-in session. They are deleted when you close your browser.
Clerk Cookies: These cookies are set by our authentication provider Clerk to manage your login state and ensure secure access. They are deleted when your session ends. Learn more about Clerk's privacy practices.
Stripe Cookies: Stripe uses cookies to process payments and enhance security. We do not store payment information, but Stripe processes it according to their Privacy Policy.

14. Contact Us

For privacy concerns or any questions about how we handle your personal data, please contact us at: contact@uptimeeye.com

15. Data Protection Officer

If we are required by law to appoint a Data Protection Officer (DPO), their contact details will be provided here.