UpConduit is an uptime and email-health monitoring service. This policy explains what we collect when you use it, why, where it is processed, how long we keep it, and what you can ask us to do with it. It is written to be read, not skimmed past. If anything is unclear, ask — the contact details are at the end.
UpConduit ("we", "us") is operated from the United Kingdom by its founder. For the purposes of UK and EU data protection law we are the data controller for your account information, and a data processor for the monitoring targets and contact details you configure on behalf of your organisation. Contact: privacy@upconduit.io.
| Data | Why | Lawful basis |
|---|---|---|
| Account: email address, hashed password, sign-in timestamps | To create and secure your account and send you the emails you sign up for (verification, alerts, billing) | Contract |
| Monitors: the URLs, hostnames, ports, domains and settings you add | To run the checks you asked for. Targets are often public addresses; you should only add systems you own or are authorised to monitor | Contract |
| Check results: response times, status codes, TLS and DNS details, error text | To show you status and history, and to decide when to alert you | Contract |
| Alert contacts: your webhook URL, SMS number, escalation email addresses and phone numbers | To deliver alerts where you asked. Escalation contacts may be other people — you are responsible for having their agreement to receive alerts from you | Contract; legitimate interests |
| Team invitations and memberships: invitee email addresses, roles | To let colleagues share your account | Contract; legitimate interests |
| Status-page subscribers: email address, confirmation token, a hashed IP address | To send outage, recovery and incident emails to people who asked for them, with confirmed opt-in; the hashed IP limits abuse of the sign-up form | Consent (withdraw with the unsubscribe link) |
| API keys | To let your scripts use the API. We store only a one-way hash; the key itself is shown to you once | Contract |
| Speed-test usage: a hashed IP address for anonymous tests, or your account for signed-in tests | To enforce the daily limits | Legitimate interests |
| Billing: plan, Stripe customer and subscription identifiers | To know what you have paid for. We never see or store card numbers — payment is handled entirely by Stripe | Contract; legal obligation (records) |
| Server logs: request metadata and errors | To keep the service running and investigate problems | Legitimate interests |
We do not use advertising cookies, tracking pixels or third-party analytics. The site stores your session token in your browser's local storage so you stay signed in; nothing else is stored there beyond a pending team invitation while you sign in.
UpConduit runs on Amazon Web Services. Your account, monitors, results and settings are stored in the London (eu-west-2) region. To measure your services from around the world, monitoring checks also run from AWS regions in North Virginia, Oregon, São Paulo, Singapore, Sydney and Tokyo; those regions receive only the target addresses being checked and write back timing results — never your account details. Free-plan monitors are checked from London only.
We use these processors, each under their own data-protection terms:
Where data leaves the UK or EU (for example the probe regions above, or Stripe's US operations) it is under the providers' standard contractual clauses or an adequacy decision.
To delete your account and everything in it, email us from your account address. We will confirm within a few days and remove your data from live systems; it may persist in encrypted backups for up to 35 days after that.
Under UK GDPR and the EU GDPR you can ask us to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or give you a copy in a portable format. Email us and we will respond within one month. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
If you subscribed to someone's status page, the page owner chose what to publish; we deliver it. Every email we send you has an unsubscribe route on the status page, and we will never use your address for anything else. If you want the owner to remove you entirely, contact them or us.
Passwords are handled by AWS Cognito and never seen by us. API keys are stored as one-way hashes. All traffic is encrypted in transit, data is encrypted at rest, and the database keeps point-in-time backups. We are a small operation and say so plainly: we will tell you promptly if we learn of a breach affecting your data.
UpConduit is a business tool and not intended for anyone under 16. We do not knowingly collect data from children.
We will update this page when our practices change and put the date at the top. For material changes we will email account holders.