Privacy Policy

1. Introduction

DATAPLANET LTD ("we", "our", or "us") operates the alerting.rocks service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application.

2. Information We Collect

Account Information: When you create an account, we collect your email address and a hashed version of your password. We never store your password in plain text.

Facebook Data: When you connect your Facebook account, we receive an OAuth access token that allows us to read your ad account metrics. We store this token securely to fetch data on your behalf. We do not access your personal Facebook profile, posts, or friends list.

Payment Information: Payments are processed by Stripe. We do not store your credit card number. Stripe may collect payment details in accordance with their own privacy policy.

Notification Channels: When you add email or Slack senders, we store the identifiers (email addresses, Slack workspace info) needed to deliver alert notifications.

Usage Data: We may collect standard server logs including IP addresses, browser type, and pages visited to maintain and improve the service.

3. How We Use Your Information

• To provide and maintain the alerting.rocks service
• To authenticate your identity and manage your account
• To fetch ad account metrics from Facebook on your behalf
• To evaluate your automation rules and send alert notifications
• To process payments and manage your subscription
• To send transactional emails (verification codes, billing receipts)
• To detect and prevent fraud or abuse

4. Data Sharing and Disclosure

We do not sell your personal data. We share information only with:

• Facebook (Meta): We use the Facebook Graph API to fetch your ad account data. Facebook's Data Policy governs their handling of data.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Slack: When you use Slack as a notification channel. Subject to Slack's Privacy Policy.
• Email providers: To deliver email notifications and verification codes.

5. Data Retention

We retain your account data for as long as your account is active. When you delete your account, we remove your personal data, connected accounts, rules, and senders within 30 days. Some data may persist in backups for up to 90 days.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), and secure token storage. However, no method of transmission over the Internet is 100% secure.

7. Cookies

We use a single HTTP-only authentication cookie to maintain your login session. We do not use tracking cookies or third-party analytics cookies.

8. Your Rights

Depending on your jurisdiction (including GDPR and CCPA), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing
• Lodge a complaint with a data protection authority

9. Children's Privacy

Our service is not intended for use by children under the age of 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the service.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at info@alerting.rocks.