Privacy Policy

1. Who We Are

WebWatch (ABN 40 670 532 871) operates the website monitoring service at webwatch.com.au. This policy describes how we collect, use, store, and protect your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

We collect the following personal information:

• Account information: Email address (required for signup and authentication)
• Monitor configuration: Website URLs you choose to monitor, check types, and alert settings, including destination details for alert channels you configure
• Usage data: Check results (up/down status, response times), incident history, and alert delivery records
• Technical data: IP address (for rate limiting and security), browser type (via standard HTTP headers)
• Payment information: If you subscribe to a paid plan, payments are processed by LemonSqueezy. We store only customer and subscription identifiers needed to manage your plan; we never see or store your credit card details.

3. How We Use Your Information

We use your personal information to:

• Provide the monitoring service (checking your URLs, sending alerts)
• Authenticate your account and manage sessions
• Process subscription changes and billing (via LemonSqueezy)
• Send downtime and recovery alert notifications through configured channels
• Protect the service from abuse (rate limiting, security monitoring)

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for advertising or profiling.

4. Data Sub-Processors

We use the following third-party services to operate WebWatch. Your data may be processed in their respective jurisdictions:

By using WebWatch, you acknowledge that your data may be processed outside of Australia by these providers. Each provider maintains their own privacy and security practices.

5. Data Retention

• Raw check data: Retained for 24 hours, then summarized
• Hourly summaries: Retained for 30 days
• Daily uptime summaries: Retained for 1 year
• Account data: Retained while your account is active. Deletion requests are handled through our account data request process, including applicable provider, log, and backup limitations.
• Alert delivery records: Retained only as needed for service operation, troubleshooting, abuse prevention, and account support, then deleted or aggregated under our retention process.

6. Data Security

We protect your data through:

• Encryption in transit (HTTPS/TLS on all connections)
• Row-Level Security (RLS) policies on customer data tables so users can only access their own data
• Authentication via secure JWT tokens
• Rate limiting on authentication endpoints
• Security headers (CSP, HSTS, X-Frame-Options)
• Operational backups for recovery, with retention controls documented before public launch

7. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your monitoring data

To exercise any of these rights, use the Account data section in signed-in Settings or contact us at support@webwatch.com.au. We will respond within 30 days.

8. Cookies

WebWatch uses essential cookies for authentication session management. We use Vercel Web Analytics for aggregate page analytics without analytics cookies. We do not use third-party advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the email address associated with your account.

10. Complaints

If you believe we have handled your personal information inappropriately, please contact us at support@webwatch.com.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

11. Contact

WebWatch (ABN 40 670 532 871)
Email: support@webwatch.com.au