1. Data we collect
- Account data such as name, email address, and login metadata.
- Site data such as monitored URLs, scan maps, journey definitions, incident notes, and screenshots captured during failures.
- Usage data such as dashboard actions, alert delivery events, and service logs.
- Support data you submit through forms, email, or other contact channels.
2. How we use data
- To provide and operate SiteOps monitoring, alerting, and AI-assisted analysis.
- To store scan evidence, incident history, and configuration tied to your account.
- To improve reliability, debug failures, and maintain service security.
- To communicate service notices, billing updates, and security alerts.
3. How we share data
- We explicitly share specific data with third-party processors to operate the service: Stripe (Payment Processing), Supabase (Database & Authentication), and Resend (Email Alert Infrastructure).
- When required by law, to protect rights, or to respond to lawful requests.
- With your direction or when you explicitly connect an integration.
We process your data under the legal basis of Contractual Necessity (to deliver the monitoring service you purchased) and Legitimate Interest (to maintain system security and debug application failures).
4. Retention and security
Evidence and screenshots are kept for a period set by your plan and are then deleted. Credentials you give SiteOps for logged-in journeys are encrypted before they reach the database and are never sent to an AI model. The Security page sets out how this works in detail, including what SiteOps will and will not do on your site. No internet service is perfectly secure, and we say plainly there what we do not yet claim.
5. Your rights and choices
- You can update your account data and site configuration through the product.
- You may request deletion or export of data, subject to legal and operational limits.
- You can manage marketing preferences where those communications are offered.
- If you are a UK or EU resident and believe we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
6. Contact
Privacy contact: Secure Support Portal
This policy applies to the SiteOps service as published here.