Privacy Policy

1. Overview

API Sentinel ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

We collect and store the following data when you use the Service:

• Email address — collected at signup, used to identify your account and send alert notifications
• Monitor configurations — URLs, monitor names, HTTP headers, and alert email addresses you provide
• API validation logs — target URLs you validate, results, and response times
• Monitor check results — HTTP status codes, response times, and pass/fail outcomes
• Plan status — whether your account is on the Free, Pro, or Scale plan

3. Data We Do Not Collect

We do not collect or store:

• Your full name, address, or phone number
• Payment details — all billing is handled securely by Stripe
• API request or response bodies
• Your plaintext API key — it is stored as a one-way SHA-256 hash and cannot be recovered by us

4. How We Use Your Data

We use your data solely to:

• Operate and provide the Service
• Send monitor failure alert emails to your specified alert address
• Manage your subscription plan via Stripe

We do not sell, share, or rent your data to third parties.

5. Third-Party Services

We use the following third-party services:

• Stripe — payment processing. Stripe's privacy policy applies to all billing data.
• Resend — transactional email delivery for alert notifications
• Supabase — database hosting and storage
• Vercel — application hosting and infrastructure

6. Data Retention

We retain your data for as long as your account is active. If you wish to have your data deleted, contact us at legal@apisentinel.io and we will process your request within 30 days.

7. Security

We take reasonable measures to protect your data including hashed API key storage, encrypted connections (TLS), and access controls on our database. No method of transmission over the internet is 100% secure.

8. Your Rights

You have the right to:

• Request a copy of the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data

To exercise any of these rights, contact us at legal@apisentinel.io.

9. Cookies

API Sentinel does not use tracking cookies or third-party analytics. We do not track your browsing behavior.

10. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be communicated via email. Continued use of the Service constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Massachusetts.

12. Contact

For privacy-related questions or requests, contact us at legal@apisentinel.io.