Privacy Policy

1. Introduction

ReturnPod ("we," "us," or "our") operates the uptime monitoring service at returnpod.com. This policy describes how we collect, use, store, and protect your personal data when you use our service.

2. Data We Collect

We collect the following categories of data:

• Account data: Email address, name, and password hash (we never store your plaintext password).
• Monitor data: URLs you monitor, monitor names, keywords (for keyword checks), alert settings (webhook URLs, Slack webhooks, alert email addresses).
• Check results: Success/failure status, HTTP status codes, response times, timestamps. We retain these for uptime history and charts (typically up to 90 days depending on your plan).
• Status pages: Slugs, names, and custom domains you configure for public status pages.
• Status page subscribers (Pro): Email addresses of people who subscribe to incident notifications.
• Incidents: Titles, status, and updates you post on status pages.
• Billing: Stripe customer and subscription IDs. Payment details are held by Stripe, not by us.
• Audit logs: Actions you take (e.g. create monitor, change settings), resource IDs, IP address, and user agent for security and compliance.
• Session data: A JWT cookie (30-day expiry) to keep you logged in.

3. How We Use Your Data

We use your data to run uptime checks, send you alerts (email, webhook, Slack), display your dashboard and status pages, process payments, and improve our service. We do not sell your data.

4. Third-Party Processors

We use the following third-party services:

• Stripe — Payment processing. See Stripe's privacy policy.
• Resend or SMTP — Transactional email (verification, password reset, alerts, incident notifications).
• Google reCAPTCHA — Bot protection on signup, login, and contact forms. See Google's privacy policy.
• Google Analytics — We use Google Analytics to understand how our website is used (e.g. traffic, pages visited). Data is processed by Google according to their privacy policy. You can opt out via the Google Analytics Opt-out Browser Add-on or your browser settings.

5. Cookies

We use a session cookie (JWT) to keep you logged in. We also use analytics cookies (Google Analytics) to understand how the site is used. You can control or disable cookies in your browser settings or use the Google Analytics Opt-out Browser Add-on to opt out of Google Analytics.

6. Retention

Check results are retained for a limited period (e.g. 90 days) depending on your plan. Account data is retained until you delete your account. Audit logs may be retained for longer for security and compliance.

7. Your Rights

You may request access to, correction of, or deletion of your personal data. You may object to processing or request data portability where applicable (e.g. under GDPR). To exercise these rights, contact us at support@returnpod.com.

8. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and secure storage. We do not store plaintext passwords or payment card details.

9. Children

Our service is not directed at children under 13. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of the service after changes constitutes acceptance.

11. Contact

For privacy questions or requests, contact us at support@returnpod.com.