Privacy Policy

1. Introduction

At Uptime.cx, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AWS infrastructure analysis service. Please read this policy carefully to understand our practices regarding your data.

2. Our Core Privacy Commitment

Our service is designed to analyze only the architectural configuration and metadata of your AWS infrastructure, not the data stored within it.

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

• Email address
• Name and company information
• Password (encrypted and hashed)
• Billing information (processed securely through third-party payment processors)

3.2 AWS Infrastructure Metadata

To provide our analysis service, we collect architectural metadata about your AWS infrastructure:

• AWS service configurations (EC2, RDS, Lambda, S3, VPC, etc.)
• Resource relationships and topology
• Security group and network configurations
• Resource utilization metrics and CloudWatch data
• IAM policies and permission structures (not credentials)
• Service health and availability metrics

Important: We do not collect the actual data stored in your databases, S3 buckets, or any other storage services. We only analyze the configuration and structure of these resources.

3.3 Usage Information

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and feature interactions
• Performance and diagnostic data

3.4 Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage patterns. You can control cookie settings through your browser.

4. How We Use Your Information

We use collected information to:

• Provide and maintain our AWS infrastructure analysis service
• Generate risk assessments and recommendations
• Create detailed reports for your DevOps teams
• Process payments and manage subscriptions
• Send service updates, security alerts, and administrative messages
• Improve our service through analytics and research
• Detect and prevent fraud or security issues
• Comply with legal obligations

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or AWS infrastructure data to third parties for marketing purposes.

5.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating our service:

• Cloud hosting providers (AWS)
• Payment processors (for billing)
• Analytics services (for service improvement)
• Customer support tools

These providers are contractually obligated to protect your data and use it only for specified purposes.

5.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Secure AWS Marketplace integration
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Until account deletion plus 30 days
• AWS infrastructure metadata: Until subscription ends plus 90 days
• Analysis reports: Available during active subscription, deleted 90 days after cancellation
• Billing records: Retained for 7 years for tax and legal compliance
• Usage logs: Retained for 12 months

8. Your Rights and Choices

You have the following rights regarding your data:

8.1 Access and Portability

You can access your account information and download your analysis reports at any time through your dashboard.

8.2 Correction

You can update your account information through your account settings.

8.3 Deletion

You can request deletion of your account and associated data by contacting us at privacy@uptime.cx. We will delete your data within 30 days, except where retention is required by law.

8.4 Opt-Out

You can opt out of marketing communications by clicking the unsubscribe link in emails or updating your preferences in account settings.

8.5 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

• Right to object to processing
• Right to restrict processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission.

10. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Third-Party Services

Our service integrates with AWS Marketplace and may contain links to third-party websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. DevOps Hiring Service

When you use our DevOps hiring service, we may share relevant infrastructure analysis information with the professionals you choose to work with. This sharing is done with your explicit consent and only for the purpose of providing the requested services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our service. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Compliance and Certifications

Uptime.cx is committed to maintaining compliance with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• SOC 2 Type II (in progress)
• AWS Security Best Practices