Privacy Policy

01Information we collect

• Account details: name, work email, company, role, team size and billing details.
• On-call details: phone numbers and notification preferences that your team adds so we can page them.
• Monitoring configuration: URLs, endpoints, request headers, assertions and schedules you create.
• Check results: status codes, response times, timing phases, certificate and domain expiry dates, and response excerpts used for keyword checks.
• Incident data: timelines, notes, roles, status page updates and postmortems written in the product.
• Integration data: deploy events, error groups and metrics read from tools you connect, such as GitHub, Sentry or Prometheus.
• Usage and device data: pages visited in the app, browser type and IP address, used for security and to improve the product.

02How we use it

• To run checks, detect failures, send alerts and page the people on call.
• To build incident timelines, status pages, postmortem drafts and uptime reports.
• To produce AI Root Cause suggestions for your own incidents.
• To bill you, provide support and keep accounts secure.
• To send service messages such as alert delivery problems, SSL expiry notices and product changes that affect you.

03AI Root Cause and your data

AI Root Cause analyses the deploys, errors and metrics in your own account to suggest likely causes. Suggestions are shown with their evidence and are only marked as confirmed by a member of your team.

We do not sell your data and we do not use your incident data, check results or connected-tool data to train models offered to other customers.

04Status pages and subscribers

Status pages publish only the components and messages your team chooses to make public. Internal monitor names, URLs and error details are not displayed to visitors.

When someone subscribes to a status page, we store their email address or phone number on your behalf, use it only to send updates for that page, and include an unsubscribe option in every message.

05Sharing

We share data only with service providers that help us run Xuptify, under contracts that limit their use of it:

• Cloud hosting and storage in the regions where our infrastructure runs.
• SMS and voice providers that deliver pages and subscriber messages.
• Email delivery providers for alerts, reports and account email.
• Payment processors for billing. We do not store full card numbers.

06Security

• Data is encrypted in transit with TLS and encrypted at rest.
• API keys and tokens for integrations are stored encrypted, and we request read-only access wherever the provider supports it.
• Access to production systems is restricted, logged and protected with multi-factor authentication.
• Xuptify never changes your systems. It only reads the data you connect.

07Retention

Check history is kept for the period included in your plan: 3 months on Free, 12 months on Team and 13 months on Scale. Incidents and postmortems are kept while your account is active. When you close your account, we delete your data within 30 days, except where we must keep billing records by law.

08Your choices and rights

• Access, correct or export your account data from the app or by asking us.
• Delete monitors, incidents, status pages and integrations at any time.
• Disconnect any integration, which stops all further reads from that tool.
• Ask us to delete your account and associated data.
• Opt out of non-essential product email. Service and alert messages continue while your account is active.

09Cookies

This website uses only the cookies needed for forms to work, such as the session used to check the quick verification question. The Xuptify app uses cookies to keep you signed in.

10Contact

Questions about this policy can be sent through contact page.