Privacy Policy

WatchTower is a SaaS platform for monitoring website availability, HTTP and HTTPS responses, SSL certificate health, incidents, public status pages, and notification delivery. This Privacy Policy applies to our marketing site, application, public status pages, support interactions, and billing flows.

We may collect the following categories of information:

• Account data such as name, email address, authentication provider, workspace membership, and session activity.
• Monitoring data such as monitored URLs, check configuration, response metadata, uptime history, SSL certificate details, and incident timelines.
• Status page data such as page names, branding, domains, content, and public availability settings that you configure.
• Notification data such as destination email addresses, webhook endpoints, delivery attempts, and delivery results.
• Billing data such as plan selection, subscription state, invoices, and payment references processed through Stripe.
• Technical data such as IP address, browser or device metadata, request logs, cookies, and security events.

We use information to operate, secure, and improve WatchTower, including to:

• create and manage user accounts and workspaces;
• run monitoring checks and display incidents, metrics, and status pages;
• send transactional emails, alerts, verification messages, and support responses;
• process subscriptions, enforce plan limits, and prevent fraud or abuse;
• diagnose service problems, investigate errors, and maintain audit trails;
• comply with legal obligations and protect our rights, users, and infrastructure.

Where applicable, we process personal data to perform our contract with you, pursue legitimate interests in operating and securing the service, comply with legal obligations, or based on your consent when required.

WatchTower uses essential cookies and server-side sessions for sign-in, workspace access, security checks, CSRF protection, and basic product functionality. We do not rely on those cookies for unrelated advertising.

We use third-party providers where needed to operate the service, including infrastructure, email delivery, payment processing, and authentication. For example, billing is processed by Stripe, and Google Sign-In may be used if enabled for your account. Those providers process data under their own terms and privacy notices.

We retain data for as long as necessary to provide WatchTower, maintain records, resolve disputes, enforce agreements, and meet legal or security obligations. Retention periods can vary by data type, subscription status, incident history, and regulatory requirements.

We use reasonable technical and organizational measures to protect personal data and service data, including access controls, authentication safeguards, logging, and transport security. No system is completely risk-free, so we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict processing of your personal data. You may also object to certain processing or withdraw consent where consent is the legal basis.

To submit a privacy request, contact us through the support channel published on the WatchTower homepage.

Your information may be processed in countries other than your own where our providers or infrastructure operate. When required, we use appropriate safeguards for cross-border data transfers.

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated effective date.