Privacy Policy

1. What we collect

We collect only what we need to run the service:

• Account: your email address, a securely hashed password (we never store it in plain text), your workspace name and the team members you invite.
• Billing: the legal name, address, state and optional GSTIN you enter for your invoices, and your payment history. Card, UPI and bank details are handled by Razorpay; we never see or store them.
• Monitoring: the URLs you monitor, check results (response times, status codes, SSL certificate details and errors), incidents and status page content.
• Alert channels: the email addresses, WhatsApp numbers, Slack webhook URLs and Telegram chats you add. Webhook URLs and bot tokens are stored encrypted.
• Sign-in and security: the IP address and browser details of each signed-in session, and a log of important actions in your workspace.
• Contact form and free checker: what you send us through the contact form, and the URL and IP address for each check run on the free checker (used to prevent abuse).

2. How we use it

We use your data to provide the service and for nothing else:

• to run checks, send alerts and publish your status pages;
• to create your account, verify your email and reset your password;
• to take payments and issue invoices, as tax law requires;
• to reply to support requests and send essential service emails, such as billing notices and changes to these policies;
• to keep the service secure and prevent abuse.

3. Cookies

We use two cookies, both strictly necessary: a session cookie that keeps you signed in (for up to 30 days, or until you sign out) and a cookie that remembers your light or dark theme. We don't use analytics or advertising cookies.

4. Where your data is stored

Your data is stored in India, on Amazon Web Services in Mumbai. Our check locations run on Amazon Web Services (Mumbai and Hyderabad) and Google Cloud (Delhi).

5. Who we share it with

We share data only with providers that help us run UpHai, and only what each needs:

• Amazon Web Services and Google Cloud: hosting, storage, backups and sending email.
• Razorpay: payments and subscriptions.
• Meta (WhatsApp), Slack and Telegram: only when you add them as alert channels, to deliver your alerts.

6. How long we keep it

Detailed check results are kept for 30 days; hourly and daily summaries for up to 13 months, so you can see uptime history. Account, monitoring and alert data are kept while your account is active. Invoices and payment records are kept for 8 years, as Indian tax law requires. Database backups are deleted after 35 days.

When you ask us to delete your account, we delete your data within 30 days, except invoices and records we must keep by law.

7. Your rights

You can ask us for a summary of the personal data we hold about you, ask us to correct or delete it, withdraw consent, and nominate someone to exercise these rights on your behalf. You can correct most details yourself in the dashboard. For anything else, email support@uphai.in; we reply within 7 days.

8. Security

All connections use HTTPS. Passwords are hashed with Argon2id, alert channel secrets are encrypted, and access to production systems is limited and logged. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

9. Grievances and changes

For questions or complaints about your data, write to our Grievance Officer at support@uphai.in. We acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

UpHai is not meant for children under 18. If we change this policy materially, we will email account owners before the change takes effect.