YouMonit YouMonit.com BETA

Privacy Policy

Effective date: 2026-05-19

1. Controller and contact

The data controller for personal data processed in connection with YouMonit.com ("Service") is Webmint s.r.o., Jana Želivského 2, 130 00 Praha 3, Czech Republic, European Union. Responsible person: Tomáš Rohlena. Privacy contact: support@youmonit.com.

For purposes of the EU General Data Protection Regulation (GDPR) we act as controller for account, billing and marketing data, and as processor of any personal data you store inside YouMonit (e.g. monitor metadata, status-page subscribers). For purposes of the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) we act as a "business".

2. What we collect

2.1 Information you provide

  • Account: name, email, password hash, optional company name, language preference.
  • Billing: billing address, VAT/Tax ID, last 4 of card & payment token (held by Stripe; we never see full card numbers).
  • Service data: monitor configurations, alert recipients, status-page content.
  • Communications: messages you send to support@youmonit.com or the contact form.

2.2 Information collected automatically

  • Telemetry: request logs (IP address, user-agent, URL, timestamp) for security and abuse prevention; retained max. 30 days.
  • Cookies and similar: a strictly-necessary session cookie, a language cookie, reCAPTCHA cookies on form pages. We do not use cross-site tracking cookies. Analytics, if enabled, is privacy-preserving and IP-anonymised.
  • Check results: response codes, latency, error strings produced by monitoring your endpoints (these may incidentally contain technical strings from your services).

2.3 We do not collect

Special-category data (Article 9 GDPR) intentionally. Children's data under age 16 (EU/EEA) or 13 (USA, COPPA) — accounts are not for use by children.

3. Why we use it (legal bases)

PurposeLegal basis (GDPR Art. 6)
Providing the Service (running checks, sending alerts)Performance of a contract — Art. 6(1)(b)
Billing, invoicing, tax complianceLegal obligation — Art. 6(1)(c)
Security, fraud and abuse preventionLegitimate interests — Art. 6(1)(f)
Improving the Service (aggregate, non-identifying)Legitimate interests — Art. 6(1)(f)
Marketing emails (existing customers, similar products)Legitimate interests — Art. 6(1)(f), opt-out at any time
Newsletter sign-ups, optional cookiesConsent — Art. 6(1)(a)

4. Sharing and processors

We share personal data only with these categories of recipients:

  • Payments: Stripe Payments Europe, Ltd. (Ireland) — billing data, card token.
  • Transactional email: Mailgun (EU region) — recipient email, subject, body.
  • SMS: Twilio Ireland Limited — phone number, alert text (only when SMS alerts are enabled).
  • Bot defence: Google reCAPTCHA (Google Ireland Ltd.) — IP, headers, behavioural signals on form pages.
  • Infrastructure / CDN / DDoS: Cloudflare, Inc. — request metadata.
  • Hosting: WEDOS Internet, a.s. (Czech Republic) — encrypted application data.
  • Legal/authorities where we are required to disclose by law.

We do not sell or share personal data for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.

5. International transfers

YouMonit primary infrastructure is in the European Union. Some sub-processors (Stripe, Cloudflare, Google, Twilio) operate globally. Transfers outside the EEA rely on Standard Contractual Clauses (Decision 2021/914), the EU-U.S. Data Privacy Framework where applicable, and supplementary measures (encryption in transit and at rest).

6. Retention

  • Active account data: retained while your account is active.
  • Closed accounts: 30 days in active systems, then deleted; encrypted backups roll off within 90 days.
  • Check results / uptime history: per your plan (max. 24 months).
  • Invoices: 10 years (Czech tax-archiving requirement).
  • Contact-form messages: 12 months from last activity unless required longer for support or legal reasons.
  • Security logs: 30 days.

7. Your rights

Under GDPR (EU/EEA/UK), CCPA/CPRA (California), and similar laws in other jurisdictions, you have the right to:

  • Access — get a copy of personal data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure / deletion — request deletion ("right to be forgotten"; "right to delete" under CCPA).
  • Restriction / limit-use of processing.
  • Portability — receive your data in a portable format.
  • Object to processing based on legitimate interests, including direct marketing.
  • Opt out of "selling/sharing" (CCPA) — note: we do not sell or share.
  • Withdraw consent where processing is consent-based.
  • Non-discrimination — we will not penalise you for exercising your rights.

To exercise rights, write to support@youmonit.com. We respond within 30 days (GDPR) or 45 days (CCPA), extendable once where allowed. You may also lodge a complaint with the Czech Data Protection Authority (uoou.cz) or, in California, with the California Privacy Protection Agency.

8. Cookies

We set only the cookies strictly necessary for the site to function (session, language, CSRF) plus reCAPTCHA cookies on form pages. We do not use cross-site advertising cookies. You can clear cookies at any time in your browser settings — doing so will sign you out.

9. Security

Personal data is encrypted in transit (TLS 1.2+) and at rest. Passwords are stored using bcrypt. Access is least-privilege and logged. We test backup restores regularly. No system is 100% secure; if a breach affecting your personal data occurs we will notify the relevant authorities within 72 hours and affected individuals without undue delay where required.

10. Children

YouMonit is not directed to children under 16 (EU/EEA) or under 13 (USA). We do not knowingly collect data from such children. If you believe we have done so, contact us and we will delete it.

11. California-specific disclosures

In the previous 12 months we have collected the categories of personal information listed in section 2, for the purposes listed in section 3, and disclosed them to the categories of recipients in section 4. We have not sold or shared personal information. California residents may request information about specific pieces of personal information we hold and may designate an authorised agent to exercise rights on their behalf.

12. Changes to this Policy

We may update this Privacy Policy. Material changes will be announced by email and here at least 14 days before they take effect.

13. Contact

Privacy questions or requests: support@youmonit.com
Postal: Webmint s.r.o., Jana Želivského 2, 130 00 Praha 3, Czech Republic, EU.