Privacy Policy

This Privacy Policy explains what data Z UpTime(operated by Zubbin, “we”, “us”) collects, why we collect it, how we use and share it, and the choices you have. It covers our website, web application, APIs, the Z UpTime WordPress plugin, and the browser monitoring widget (the “Service”). It should be read together with our Terms & Conditions.

1. Account & billing data

When you create or are provisioned an account, we collect:

• your email address and optional name;
• a securely hashed password (we never store passwords in plain text);
• authentication and session information; and
• billing details processed by our payment provider, Stripe — we store a customer/ subscription reference and plan status, but not full card numbers.

We use this to operate your account, provide and secure the Service, process payments, and contact you about incidents, security, and your subscription.

2. Data from the WordPress plugin

When you connect a site with the Z UpTime plugin, it sends us, on pairing and on each scheduled heartbeat:

• the site URL, site name, and the WordPress administrator email (used to identify and contact the site owner and to link the site to an account);
• WordPress version, PHP version, active theme, and installed plugins — including which have updates available;
• health signals: up/down status, response time, database and REST-API reachability, last cron run, and whether a recent fatal error occurred.

The plugin does not collect or transmit your posts or page content, customer or visitor records, order data, passwords, or other sensitive site data. Deactivating the plugin stops transmission; uninstalling it also deletes its stored settings and local log table.

3. Browser monitoring widget (RUM)

If you embed our browser widget, it collects anonymous performance data from page loads: load time, Core Web Vitals (LCP, CLS, INP), time to first byte, the page URL, JavaScript error messages, and the browser user- agent string. The widget does not set cookies and does not collect names, emails, or other personal identifiers of your visitors.

4. Monitoring & usage data

To operate the Service we store the results of the checks you configure — status, response times, incidents, uptime history — and basic usage/diagnostic logs needed to run, secure, and improve the Service.

5. How we use data

• to monitor your sites, endpoints, and jobs and to detect and notify you of incidents;
• to display dashboards, analytics, and status pages;
• to provide support and communicate service, security, and billing information;
• to process payments and manage subscriptions; and
• to maintain, secure, troubleshoot, and improve the Service, and to comply with legal obligations.

6. Sharing & sub-processors

We do not sell your personal data. We share data only with service providers that help us run the Service, who process it on our behalf under appropriate obligations — currently our hosting provider, our email delivery provider (SendGrid), and our payment processor (Stripe). We may disclose data where required by law or to protect our rights, users, or the Service.

7. Email

We send transactional and monitoring emails (for example, incident alerts, password resets, onboarding, and optional digests) from alerts@zubbin.com. You can change your notification preferences or turn off digests in your dashboard; incident alerts are part of the core Service.

8. Retention

We keep account data while your account is active. Monitoring check results are retained for a limited window (by default approximately 90 days) and then deleted. Backups are kept for a limited period for disaster recovery. You can request deletion of your account and associated data at any time (subject to limited retention required for legal, security, or billing purposes).

9. Security

We use technical and organisational measures to protect data, including encryption in transit (HTTPS), hashed passwords, scoped access controls, single-use expiring links, and network hardening. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address issues.

10. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below. [Add GDPR/UK-GDPR/CCPA-specific disclosures and your legal bases before publishing.]

11. International transfers

Your data may be processed in countries other than your own, including where our providers operate. Where required, we rely on appropriate safeguards for such transfers.

12. Children

The Service is not directed to children and is intended for business/professional use.

13. Changes

We may update this Policy from time to time. Material changes will be indicated by updating the date above and, where appropriate, by additional notice.

14. Contact

Questions or requests about your data? Email privacy@zubbin.com (or support@zubbin.com).