Privacy policy

Upcertain is an uptime monitoring service operated by Innovation Insight ("we"). This policy explains what we collect when you use Upcertain, why, and what you can do about it. Questions go to upcertain-support@innovation-insight.com.

What we collect

• Account details: your email address, the name you give us, your password (stored only as a hash by our authentication provider) and the accounts and roles you belong to.
• Monitoring configuration: the URLs, hosts, ports, keywords and settings of the monitors you create, your alert channels, status pages, maintenance windows and API keys. Webhook URLs and other alert credentials are encrypted at rest. API keys are stored only as a hash.
• Monitoring results: the outcome of each check (status, response time, status code, error), incidents and their timelines, including a short snippet of the response when a check fails.
• Status page subscribers: the email address of anyone who subscribes to a status page, and whether they confirmed it.
• Messages you send us: the name, email, company and message you submit through the contact form.
• Technical data: IP addresses and request details in server logs, kept for security and troubleshooting.

Why we use it

To run the service you signed up for: checking your endpoints, opening incidents, sending the alerts and reports you configure, publishing your status pages, keeping your account secure and answering your messages. We do not sell personal data and we do not use it for advertising.

Cookies

Upcertain uses only the cookies it needs to work: your sign-in session, the account you are working in, and access to password-protected status pages. There are no analytics or advertising cookies.

Where it is stored and who processes it

• Supabase hosts our database and authentication, in the Seoul (ap-northeast-2) region.
• Amazon Web Services hosts the application servers that run checks and serve the app.
• Resend delivers our emails: alerts, invitations, status page updates and account messages.
• Alerts you route to Slack, Discord, Microsoft Teams, Google Chat or your own webhook are sent to those services under your own agreements with them.

Every account's data is separated at the database level with row-level security, so one account cannot read another's monitors, incidents or settings.

How long we keep it

• Detailed check results: 7 days by default (your plan can change this).
• Hourly uptime summaries: 90 days. Daily summaries: 2 years.
• Heartbeat pings: 30 days. Audit log entries: 365 days.
• Everything else for as long as your account exists. When an owner deletes an account, its monitors, incidents, status pages, channels and keys are deleted.

Your choices

You can change your profile and delete accounts you own from the account settings. Status page subscribers can unsubscribe from any update email, and notify-only contacts can stop alerts from the link in each email. To access, correct or delete other personal data, email upcertain-support@innovation-insight.com.

Changes

If we change this policy in a way that matters, we will tell account owners by email before it applies.