Privacy Policy

Introduction

Welcome to StatsPing ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API monitoring and testing platform at statsping.net, including our web application, mobile applications, and services (collectively, the "Service").

Please read this Privacy Policy carefully. By using StatsPing, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

• Name and email address
• Password (encrypted and hashed)
• Organization name
• Phone number (optional, for SMS alerts)
• Billing information (processed securely through our payment provider)

OAuth Information: When you sign up using OAuth providers (Google, GitHub), we receive your email address, profile name, and profile picture (optional).

Monitor Configuration: API endpoint URLs, custom headers, authentication tokens, request bodies, validation rules, check intervals, and timeout settings.

Alert Configuration: Email addresses, Slack/Discord webhook URLs, PagerDuty integration keys, SMS numbers, and custom webhook endpoints.

1.2 Information We Collect Automatically

Service Usage Data: Monitor check results (response times, status codes), SSL certificate information, uptime statistics, alert history, and incident reports.

Technical Information: IP address, browser type, device information, time zone, API usage logs, and WebSocket connection logs.

Cookies: We use cookies and similar tracking technologies to track activity on our Service.

2. How We Use Your Information

• Service Provision: Create and manage your account, execute monitoring checks, process alerts, generate reports, and manage billing
• Service Improvement: Analyze usage patterns, debug issues, optimize performance, and develop new features
• Communication: Send service notifications, respond to inquiries, and provide updates
• Security: Detect fraud, monitor trends, and comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Infrastructure Providers: Cloud hosting (AWS), database services, CDNs
• Payment Processing: Payment gateways (e.g., Stripe) - we don't store full credit card information
• Notification Services: Email delivery, SMS gateways, Slack/Discord/PagerDuty when you configure integrations
• Analytics: Application monitoring and error tracking
• Legal Requirements: Court orders, government authorities, fraud prevention

4. Data Retention

5. Data Security

We implement industry-standard security measures:

5.1 Technical Measures

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Row-level security in PostgreSQL
• Regular security audits
• Secure password hashing (bcrypt)
• API rate limiting

5.2 Access Controls

• Role-based access control (RBAC)
• Multi-factor authentication (optional)
• API key management with scoped permissions
• Encrypted API tokens

6. Your Data Rights

Depending on your location, you may have rights to:

• Access and Portability: Request a copy of your personal data, export configurations and historical data
• Correction: Update your account information at any time
• Deletion: Delete your account and associated data
• Restriction and Objection: Object to processing, restrict processing, opt-out of marketing
• Withdrawal of Consent: Withdraw consent for data processing

To exercise these rights, contact us at privacy@statsping.net.

7. International Data Transfers

StatsPing operates globally. Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards including standard contractual clauses and compliance with the EU-U.S. Data Privacy Framework.

8. Children's Privacy

StatsPing is not intended for individuals under 18. We do not knowingly collect personal information from children.

9. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know what personal information we collect, use, disclose, and sell
• Right to Delete your personal information
• Right to Opt-Out of sale (Note: We do not sell personal information)
• Right to Non-Discrimination for exercising your rights

10. European Union (GDPR) Rights

If you are in the EEA, you have rights under GDPR including all rights listed in Section 6, plus the right to lodge a complaint with a supervisory authority and the right to data portability in a machine-readable format.

Contact our Data Protection Officer at dpo@statsping.net.

11. Cookies and Tracking Technologies

We use:

• Essential Cookies: Authentication, session management, security
• Performance Cookies: Analytics, error tracking, performance monitoring
• Functional Cookies: User preferences, language settings, dashboard configurations

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you by posting the new policy, updating the "Last Updated" date, and sending email notifications for material changes.

13. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours of discovering the breach with details about what was affected and steps we're taking.