Privacy Policy

Last updated: 10 March 2026

This Privacy Policy explains how is0k ("we", "our", or "us") collects, uses, and protects information about you when you use our website at is0k.com and our monitoring services (collectively, the "Service").

1. Who we are

is0k is an uptime and API health monitoring service. Our registered contact address is hello@is0k.com.

2. Information we collect

Information you provide directly

  • Account information — email address, name, and password when you register.
  • Billing information — payment details are processed by Stripe and we do not store full card numbers.
  • Monitor configuration — URLs, credentials, and settings you add to your monitors.
  • Support communications — messages you send us via email or contact forms.

Information collected automatically

  • Log data — IP address, browser type, pages visited, and timestamps when you use the Service.
  • Cookies and local storage — see our Cookie Policy for details.
  • Usage data — aggregate statistics about how features are used (e.g. number of monitors created).

3. How we use your information

  • To provide, operate, and maintain the Service.
  • To send you transactional emails (account verification, password reset, billing receipts).
  • To send you monitoring alerts and incident notifications you have configured.
  • To respond to your support requests.
  • To detect and prevent fraud, abuse, or security incidents.
  • To comply with legal obligations.
  • With your explicit consent, to send you product updates or newsletters (you can opt out at any time).

4. Legal basis for processing (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

  • Contract performance — processing necessary to provide the Service you signed up for.
  • Legitimate interests — fraud prevention, security, and service improvement.
  • Consent — for marketing communications and non-essential cookies.
  • Legal obligation — where we are required to retain or disclose data by law.

5. Sharing your information

We do not sell your personal data. We may share it with:

  • Service providers — Stripe (payments), Resend (transactional email), Cloudflare (CDN/security). These providers process data only on our behalf and under appropriate agreements.
  • Legal authorities — if required by applicable law, court order, or to protect the rights and safety of our users or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before it becomes subject to a different privacy policy.

6. Data retention

We retain account data for as long as your account is active. Monitor check results are retained according to your plan (24 hours on Starter up to 2 years on Enterprise). After account deletion we delete your personal data within 30 days, except where retention is required by law.

7. Your rights

Depending on your location you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Data portability (receive your data in a machine-readable format).
  • Withdraw consent at any time (where processing is based on consent).
  • Lodge a complaint with your national data protection authority.

To exercise any of these rights, please email us at privacy@is0k.com. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies. For full details, please see our Cookie Policy.

9. Security

We use industry-standard measures including TLS encryption in transit, bcrypt password hashing, and access controls to protect your data. No system is 100% secure — if you believe your account has been compromised, contact us immediately at security@is0k.com.

10. International transfers

Your data may be processed outside your country of residence. Where we transfer data from the EEA or UK to third countries, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

11. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email or via an in-app notice. The "Last updated" date at the top of this page reflects the latest revision.

13. Contact

Questions or concerns about this policy? Email us at privacy@is0k.com.