Privacy Policy — UptimeDog

1. General provisions

This Personal Data Processing Policy (the «Policy») applies to all personal data that the operator — Самозанятый (плательщик налога на профессиональный доход), Павлович В.В. (the «Operator», «we») — receives when the UptimeDog service is used: the website uptimedog.org, the Telegram bot @UptimeDogBot and the related infrastructure.

The Policy is drawn up in accordance with Federal Law No. 152-FZ of 27.07.2006 «On Personal Data» and applies to all users of the service.

By using UptimeDog, the user agrees to this Policy. If the user does not agree with its terms, use of the service should be discontinued.

2. Definitions

Personal data — any information relating to a directly or indirectly identified natural person (the data subject).
Processing of personal data — any action or set of actions with personal data, including collection, recording, storage, use, transfer and deletion.
User — a natural person who uses the UptimeDog service.
Service — the UptimeDog website and Telegram bot that provide monitoring of websites, SSL certificates and domains.

3. What data is processed

3.1. Data provided by the user directly

Telegram ID, username, first and last name — when authorizing in the bot.
Email address — when signing in via Google OAuth in the web panel.
URLs of the sites the user adds for monitoring.
Notification settings and check intervals.

3.2. Data collected automatically

Technical logs: device IP address, browser and operating system type, request times — to the extent necessary for diagnostics and protection against abuse.
Data on payments made via Telegram Stars — transaction ID, amount, currency (XTR), subscription period. We do not receive or store bank card details; settlements are handled inside the Telegram platform.
Cookies and similar technologies — see the «Cookie Policy» section.

3.3. What we don't collect

We don't collect special categories of personal data (health, political views, biometric data, etc.).
We don't collect the content of the pages the user adds for monitoring — only the HTTP response status code, response time and (if explicitly configured by the user) the presence of a specified keyword.

4. Purposes of processing

Providing the service's functionality: site monitoring, sending notifications, keeping statistics.
User authentication and protection of their account.
Processing payments for the Premium subscription and donations.
Technical support and feedback with the user.
Ensuring the security of the service, preventing fraud and violations of the terms of use.
Fulfilling obligations under the laws of the Russian Federation (for example, storing payment data in accordance with the NPD tax regime).

5. Legal bases for processing

Personal data is processed on the following bases (Art. 6 of No. 152-FZ):

consent of the data subject, expressed by starting to use the service;
performance of a contract to which the subject is a party (use of the service's functionality);
fulfilment of obligations imposed on the Operator by the laws of the Russian Federation.

6. Retention periods

Account data — for the whole period of using the service and for 30 days after the last activity; after that the data is anonymized or deleted on request.
Technical request logs — no more than 90 days.
Payment and subscription history — for the period set by Russian tax law for the self-employed (currently — 4 years from the date of the transaction).
Site check results — according to the user's plan (Free — 30 days, Premium — up to 1 year).

7. Sharing with third parties

We don't sell or share personal data with third parties for marketing purposes. Data may be shared only in the following cases:

Telegram — when using the bot and accepting payments via Telegram Stars. Telegram's privacy policy: telegram.org/privacy.
Google — when using Google OAuth authentication. Policy: policies.google.com/privacy.
Hosting and infrastructure providers — to the minimum extent necessary for the service to work.
Government authorities — solely upon a reasoned request in the manner established by law.

All such recipients undertake to ensure the confidentiality and security of the data they receive.

8. Data subject rights

In accordance with Art. 14 of No. 152-FZ you have the right to:

obtain information about which of your data we process;
demand clarification, blocking or destruction of your data if it is incomplete, outdated, inaccurate or obtained in violation of the law;
withdraw consent to the processing of personal data;
appeal the Operator's actions or inaction to Roskomnadzor or in court.

Send requests to support@uptimedog.org, specifying your Telegram ID or the email used at registration. Response time — up to 10 business days. To delete your account, the /delete_account command in the bot is enough (will be added in upcoming versions) or an email to the address above.

9. Security measures

The Operator takes reasonable organizational and technical measures to protect data:

encryption of connections over HTTPS / TLS;
storing passwords and tokens as cryptographic hashes;
restricting access to data on a least-privilege basis;
regular backups and infrastructure monitoring;
logging of administrative actions with per-user traceability.

10. Policy changes

We reserve the right to update the Policy. The current version is always available at /docs/privacy. We additionally announce material changes in the Telegram bot and/or the web panel.

11. Contacts

Operator: Самозанятый (плательщик налога на профессиональный доход), Павлович В.В..
Email for personal-data requests: support@uptimedog.org.

The Operator's full name, INN and postal address will be provided shortly as the relevant documents are obtained. Until they are published, the Operator is identified by the name and email address above.