Privacy Policy

1. Who We Are

CertPulse (“we”, “us”, “our”) is an SSL certificate and API health monitoring service. Our contact email is support@cert-pulse.dev.

2. Information We Collect

• Account data — your name, email address, and password (hashed) when you register.
• Endpoint data — the URLs and hostnames you add for monitoring.
• Credential metadata — names, types, and expiry dates of credentials you track. We never store actual secret values.
• Usage data — pages visited, features used, and error logs to improve the product.
• Payment data — processed by Stripe. We store only your Stripe customer ID and subscription status.

3. How We Use Your Information

• To provide and operate the CertPulse service.
• To send monitoring alerts and expiry notifications you have configured.
• To process payments and manage your subscription.
• To respond to support requests.
• To improve the product through aggregated, anonymised usage analytics.

4. Data Sharing

We do not sell your personal data. We share data only with sub-processors required to operate the service (e.g. Stripe for billing, Resend for transactional email, Railway for hosting). Each sub-processor is bound by a data processing agreement.

5. Data Retention

We retain your account data for as long as your account is active. Certificate scan history is retained for 90 days on the Free plan and 12 months on paid plans. You may request deletion of your account and all associated data at any time by emailing us.

6. Security

All data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed using bcrypt. We do not log JWT tokens or secret values.

7. Your Rights

Depending on your location you may have the right to access, correct, or delete your personal data, or to object to or restrict its processing. To exercise any of these rights, contact us at support@cert-pulse.dev.

8. Cookies

We use only essential cookies required for authentication (HTTP-only refresh token) and session management. We do not use advertising or tracking cookies.

9. Changes To This Policy

We may update this policy from time to time. Material changes will be communicated by email or a prominent notice in the dashboard. Continued use of the service after the effective date constitutes acceptance of the updated policy.

10. Contact

For any privacy questions or requests, email support@cert-pulse.dev.