1. Scope and data controller
This Privacy Policy applies to the OwlUptime website, accounts, monitoring platform, status pages, support interactions, and related services (the “Service”). Owl Uptime, located in Istanbul, Türkiye, is the data controller for account, website, service, and direct support data. You can contact us at [email protected].
When a customer submits personal data through monitor configurations, incident communications, integrations, or status pages, that customer decides why and how the data is used. In those circumstances, OwlUptime generally acts as a processor on the customer’s instructions. A separate data processing agreement may supplement this policy.
2. Information we collect
- Account data, such as your name, business email address, authentication details, workspace membership, and security preferences.
- Monitoring data, such as endpoint URLs, IP addresses, ping targets, check settings, response results, incident history, SSL information, and status-page content. When port monitoring becomes available, configured port targets will also be processed.
- Technical and usage data, such as IP address, browser and device information, timestamps, feature activity, diagnostic logs, and alert-delivery records.
- Subscription and transaction data, such as plan, billing period, invoice details, payment status, and tax information. Paddle acts as Merchant of Record and processes checkout, payment, invoicing, fraud-prevention, and tax data under its own buyer terms and privacy notice. Full card details are processed by Paddle and are not stored by Owl Uptime.
- Communications data, including contact-form submissions, support requests, feedback, and related correspondence.
- Cookie and preference data, including the choice you make in our cookie banner.
3. How and why we use information
We process personal data only when we have a valid purpose and legal basis.
- To create and secure accounts, run checks, deliver alerts and reports, provide status pages, and administer subscriptions as necessary to perform our contract with you.
- To prevent abuse, investigate incidents, maintain reliability, improve the Service, and understand aggregate product usage based on our legitimate interests, where those interests are not overridden by your rights.
- To keep accounting records, respond to lawful requests, and meet tax, consumer, and regulatory obligations where processing is required by law.
- To use non-essential analytics or send optional marketing communications only where we have obtained the consent required by applicable law. OwlUptime currently does not offer a newsletter.
4. Customer monitoring data
You must have the necessary rights and authority to monitor every endpoint you add and to provide any personal data contained in monitor names, responses, reports, integrations, or status pages. Avoid placing unnecessary personal or sensitive data in monitor configurations.
Public status pages are visible to anyone. Password-protected and private pages limit access but should not be used to publish secrets, credentials, or special-category personal data.
5. Sharing and international transfers
We do not sell personal data. We may share the minimum data necessary with service providers that support hosting, authentication, security, customer support, analytics, and delivery of email, SMS, Slack, Telegram, or Discord alerts. Purchase and billing information is shared with Paddle, our Merchant of Record. We may also disclose information when required by law, to protect the Service or users, or as part of a corporate transaction subject to appropriate safeguards.
Primary OwlUptime service and monitoring data is hosted in Germany. Paddle and integrations you enable may process data in other countries under their own terms and privacy notices. Where applicable law requires it, we use an approved transfer mechanism and contractual or technical safeguards for transfers for which Owl Uptime is responsible.
6. Cookies and similar technologies
Essential technologies are used to provide security, remember preferences, and operate the Service. Optional analytics are used only after the required choice or consent. You can learn more and change your browser settings through our Cookie Policy.
7. Retention
We retain account and monitoring data while your account is active and for only as long afterward as needed to close the account, protect security, resolve disputes, or meet legal obligations. Operational logs and backups are removed or overwritten on controlled schedules. Billing and tax records may be retained for the period required by law. We may keep de-identified or aggregated information that can no longer reasonably identify you.
8. Security
We use administrative, technical, and organisational safeguards designed to protect personal data, including access controls, logging, secure transport, and least-privilege practices. No online service can guarantee absolute security. Keep your credentials confidential, use a strong password, and notify us promptly if you suspect unauthorised access.
9. Your privacy rights
Depending on your location and the applicable law, including the GDPR and Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK), you may have rights to be informed; access, correct, delete, or restrict personal data; object to certain processing; receive portable data; withdraw consent; and complain to a competent supervisory authority. KVKK may also give you the rights listed in Article 11, including learning whether data is processed, requesting information, and seeking correction, deletion, or compensation where the statutory conditions apply.
Submit a request to [email protected] and identify the account and right concerned. We may verify your identity and authority before responding. If Owl Uptime processes the data only for a customer, we may direct the request to that customer. Rights can be limited where an exception under applicable law applies.
10. Business users and minors
The Service is designed for businesses and professional users and is not directed to children. Do not provide personal data about a child unless you are legally authorised to do so and it is strictly necessary for your lawful use of the Service.
11. Changes and contact
We may update this policy when the Service, our processing, or applicable law changes. We will publish the revised date and provide additional notice where required. For privacy questions or requests, email [email protected]. This policy should be read together with the Terms of Service and Cookie Policy.