Privacy policy — Instatus

Cited by

Facts read from this source

• Entity Report an error

  “Instatus, Inc. ("Instatus", "we") is a Delaware corporation. Our mailing address is 9450 SW Gemini Dr PMB 30900, Beaverton, Oregon 97008-7105, USA.”

• Roles Report an error

  “We are a processor for the data our customers put into Instatus. That includes their status page content, the people who subscribe to their status pages, their on-call contacts and their monitoring data.”

• Account collection Report an error

  “When you sign up, we collect your name, email address, password (stored only as a salted bcrypt hash), and your team or company name.”

• Payment processor Report an error

  “Payments for self-serve plans are handled by Paddle, our reseller and Merchant of Record. Your card details go directly to Paddle and never touch our servers.”

• AI features Report an error

  “Instatus uses AI providers to translate, summarize and draft content and to detect abuse.”

• Page reference Report an error

  “See our subprocessors page for what each provider does.”

• No sale Report an error

  “We'll never sell your personal data, and we won't use your name or your company's name in marketing without your permission.”

• Cookies consent eea Report an error

  “If you visit from the European Economic Area, the UK or Switzerland, analytics and marketing cookies stay off until you choose.”

• Gpc Report an error

  “If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing and keep marketing cookies off in that browser.”

• Cookie consent retention Report an error

  “We save your choice in a cookie for six months, and it applies to instatus.com and the dashboard.”

• Account deletion Report an error

  “When you delete your account, we delete it from our active systems within 30 days and from backups within 60 days.”

• Content deletion Report an error

  “Content you delete while your account is active is removed within 30 days.”

• Billing retention Report an error

  “Billing records for as long as tax and accounting laws require, typically up to 7 years.”

• Security measures Report an error

  “We protect personal data with encryption in transit, encryption at rest for our primary database and backups, multi-factor authentication, access controls and monitoring.”

• Data location Report an error

  “We're based in the United States and store data primarily in the United States.”

• International transfers Report an error

  “When we transfer personal data from the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses and the UK and Swiss equivalents, together with additional safeguards where needed.”

• Rights response time Report an error

  “We'll respond within 30 days, or sooner if the law requires.”

• Law enforcement Report an error

  “Instatus won't hand over customer data to law enforcement unless a court order or other legally binding process requires it.”

• Children Report an error

  “We don't knowingly collect personal data from anyone under 16.”

• Google API policy Report an error

  “Instatus's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.”

• Sharing Report an error

  “With integrations you turn on, such as Slack or PagerDuty, when you ask us to.”

• DPA reference Report an error

  “Our customer decides how that data is used, and our Data Processing Addendum governs how we handle it.”

• Subscriber unsubscribe Report an error

  “You can always unsubscribe from a status page using the link in any notification.”

Scores citing this record

• The Agency Developer European sovereignty
• The Customer Support Lead European sovereignty
• The E-Commerce Operations Manager European sovereignty
• The SaaS Platform Engineer European sovereignty
• The Information Security Officer API, monitoring as code & team administration
• The Information Security Officer European sovereignty
• The Skeptic European sovereignty