Privacy policy (with subprocessors) — updown.io

Cited by

Facts read from this source

• Hosting Report an error

  “OVH (France, EU), Hetzner (Germany, EU) and DigitalOcean (US: DPF & SCCs) for hosting the website, storing data and monitoring requests.”

• Monitoring Report an error

  “Vultr (US: SCCs), Akamai Cloud (US: DPF & SCCs) and LNX Solutions (South Africa: POPIA) for monitoring requests only (no data stored).”

• Payments Report an error

  “Stripe (Ireland, EU), Paypal (Luxembourg, EU) and CoinGate (Lithuania, EU) for payments.”

• Sms Report an error

  “Vonage (US: DPF & SCCs), SMSalert.mobi (Romania, EU) and Twilio (US: DPF & SCCs) for sending SMS notifications.”

• DPA in force Report an error

  “That relationship is governed by our Data Processing Agreement, which is part of the Terms of Service and already in force for every account, with nothing to sign.”

• Processor role Report an error

  “If you use updown.io in the course of business and we process personal data on your behalf (for example alert recipient details, monitoring credentials, or personal data incidentally present in a monitored response), we act as your "processor" under Article 28 of the GDPR.”

• Transfer mechanisms Report an error

  “Standard Contractual Clauses (SCCs) approved by the European Commission (Implementing Decision (EU) 2021/914), which we enter into with the relevant sub-processor, or which are already incorporated into that sub-processor's own data processing agreement; and/or The EU-US Data Privacy Framework (DPF), for sub-processors established in the United States that are self-certified under this framework”

• South africa transfer Report an error

  “For our monitoring node hosted in South Africa (LNX Solutions), no adequacy decision or DPF applies. The data reaching that node is limited to what is necessary to run the checks, should you choose to use this monitoring location, which is itself a transfer basis recognised by the GDPR (Article 49(1)(b)).”

• Account deletion Report an error

  “In which case all data (personal or not) associated with your account will be removed from the service database instantly. Some information may still be present in our logs and backups though, and will definitely be gone after up to one week.”

• Inactivity purge Report an error

  “But we automatically delete inactive checks and accounts after 3 years of inactivity.”

• Metrics compaction Report an error

  “the Apdex metrics (initially stored per hour) are grouped by day after 3 days and then by months after 2 months. The detailed responses for the last 5 requests which started a downtime are deleted after 3 years, the downtime is kept but only with basic information (error and timing).”

• Log retention Report an error

  “Logs and usage information that are not necessary for the execution of our service are only kept for one month after their collection.”

• No marketing emails Report an error

  “We don't send any marketing email, only personal emails related to your account.”

• Cookie purpose Report an error

  “We use cookies only to identify and authenticate clients of our service.”

• Payment data handling Report an error

  “Financial information (ex: credit card number, name, postal code) are not collected by us, they go directly to the payment services provider and only when you make a purchase.”

• Supervisory authority Report an error

  “Remember that you can always submit a request to the CNIL (Commission Nationale de l'Informatique et des Libertés, the French Data Protection Authority).”

• Origin Report an error

  “Made with in Paris, France since 2012”

• Oauth registration Report an error

  “If you register using and OAuth provider (Github or Google) the screename and email are imported and the password is not required.”

• Based on Report an error

  “this Privacy Policy is based on the Creative Commons licensed policy by Automatic (the awesome guys that created WordPress).”

Scores citing this record

• The Agency Developer Uptime reports, data & the vendor's own reliability
• The Agency Developer European sovereignty
• The Customer Support Lead European sovereignty
• The E-Commerce Operations Manager European sovereignty
• The SaaS Platform Engineer European sovereignty
• The Information Security Officer Uptime reports, data & the vendor's own reliability
• The Information Security Officer European sovereignty
• The Skeptic Uptime reports, data & the vendor's own reliability
• The Skeptic European sovereignty