Privacy Policy

1. Who we are

The data controller for the purposes of the General Data Protection Regulation (GDPR) is:

Operating under the trade name WatchCat.

We act as:

• Data Controller for account and billing data
• Data Processor for monitoring data submitted by customers

2. What data we collect

2.1 Account data

When you create an account, we collect:

• Email address
• Name (optional)
• Company or organization name
• Authentication credentials (stored securely)

2.2 Monitoring data

When you use the Service, we process:

• URLs, endpoints, and identifiers you configure
• Monitoring results (HTTP status codes, response times, timestamps)
• Cron check metadata (execution time, success/failure)
• Incident and alert history

We do not intentionally process sensitive personal data.

2.3 Communication data

If you contact us, we may process:

• Email content
• Support messages
• Related metadata

3. Why we process your data (legal basis)

We process personal data based on the following legal grounds under GDPR:

• Performance of a contract – to provide the Service
• Legitimate interest – to operate, secure, and improve the Service
• Legal obligation – for accounting and tax compliance
• Consent – where explicitly required (e.g. optional communications)

4. How we use your data

We use data to:

• Provide uptime and cron monitoring
• Send alerts and notifications
• Operate status pages
• Manage accounts and billing
• Ensure security and prevent abuse
• Communicate service-related information

5. Data processors and third parties

We use trusted third-party processors to operate the Service, including:

• Infrastructure & hosting providers (EU-based where possible)
• Email delivery providers
• Payment providers (e.g. Lemon Squeezy)
• Error tracking and logging tools

These providers process data only according to our instructions and GDPR requirements.

6. Data location

We store and process data primarily within the European Union. If data is transferred outside the EU, appropriate safeguards (such as Standard Contractual Clauses) are applied.

7. Data retention

We retain personal data:

• As long as your account is active
• As necessary to provide the Service
• As required by legal obligations

You may delete your account at any time, after which data will be deleted or anonymized within a reasonable timeframe, unless legally required otherwise.

8. Your rights under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

Requests can be sent to [email protected]

9. Cookies

We use strictly necessary cookies to:

• Authenticate users
• Maintain sessions
• Operate the Service

We do not use cookies for advertising or cross-site tracking.

10. Security

We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, and secure infrastructure.

However, no system is 100% secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated "Last updated" date.

12. Contact

For any privacy-related questions, contact us at: [email protected]