Privacy policy
FlowUptime is operated by Novyst in Portugal, at Portugal. This policy explains how account, monitoring, billing, analytics and security data are processed.
Data we process
We process account identity, workspace configuration, website URLs, monitor results, incident records, notification destinations, security audit data and Stripe billing identifiers. Payment card details are handled directly by Stripe and are not stored by FlowUptime.
Optional public website check
If you request the free preview, we read your public homepage, robots.txt, root sitemap and at most two same-host image samples. We do not submit forms, sign in, execute page scripts or retain the raw HTML. The public origin and a short result are cached temporarily, with access to the result limited to fifteen minutes and cache cleanup after thirty minutes through the scheduled task. A session stores a hashed result reference and expiry. Hashed IP and origin rate-limit keys expire after their hourly window and are removed by normal maintenance. The target address is not added to our analytics events. The result does not verify a whole website or actual search indexing.
Optional website analytics
On public and account-access pages, Google Analytics is loaded only after you accept optional analytics. It may process page views, approximate device and browser information, and interactions with trial, pricing and contact actions. Advertising storage, ad personalisation and Google Signals are disabled by FlowUptime. Your consent choice is stored locally in your browser and can be changed through “Cookie settings” in the footer. Learn more in Google's privacy policy.
Purpose and retention
Data is used to provide monitoring, deliver alerts, secure accounts, understand the public trial journey, meet legal obligations and improve service reliability. Monitoring history is retained according to the active plan. Security logs may be retained where necessary to prevent abuse.
Processors and transfers
Infrastructure, email, Stripe and, where analytics consent is granted, Google may process limited data required to provide their services. We use appropriate contractual and technical safeguards.
Optional SMS alerts
If you enable SMS, BulkGate receives the recipient phone number, verification or alert text, and message reference needed to send the message. FlowUptime keeps the recipient configuration encrypted and records credit movements, message identifiers, send outcomes and available delivery reports. Verification codes are stored as hashes, not readable codes. SMS are for monitoring alerts and verification, not marketing campaigns. See BulkGate’s privacy policy. You must have permission to add each recipient.
Your rights
You may request access, correction, export or deletion where applicable. Contact privacy@flowuptime.com.
Security
FlowUptime uses encrypted secrets, access controls, domain verification, prepared database queries, audit records and transport security. No internet service can guarantee absolute security.