Privacy Policy

1. Introduction

Welcome to Synthmon ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our distributed synthetic monitoring service.

By using Synthmon, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide

• Account Information: Email address and password when you register
• Monitor Configuration: URLs and settings for websites you monitor
• Payment Information: Processed securely through third-party payment processors (we do not store credit card details)
• Communications: Information you provide when contacting support

Information Collected Automatically

• Usage Data: How you interact with our service, features used, and performance metrics
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, access times, and pages viewed
• Cookies: Session cookies for authentication and preferences

Agent Network Data

If you run a Synthmon agent, we collect:

• Agent performance metrics and uptime
• Geographic location (country/region level)
• Cryptographic public keys for authentication
• Check results and response times

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining our monitoring service
• Processing your monitoring checks and sending alerts
• Improving and optimizing our service
• Communicating with you about your account and service updates
• Detecting and preventing fraud or abuse
• Complying with legal obligations
• Analyzing usage patterns to improve user experience

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following situations:

• Service Providers: With third parties that help us operate our service (hosting, analytics, email delivery)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for specific purposes
• Public Data: Agent leaderboard data (without personal information) is publicly visible

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Ed25519 cryptographic signatures for agent authentication

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: Retained while your account is active
• Monitor History: Check results retained for 30 days (free tier) or 90 days (paid tiers)
• Agent Data: Performance metrics retained for 90 days
• Logs: Security and error logs retained for 30 days

Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain uses of your data
• Restriction: Request limited processing of your data

To exercise these rights, contact us at privacy@synthmon.io.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences (theme, settings)
• Analyze usage through Google Analytics
• Improve service performance

You can control cookies through your browser settings, but disabling them may limit functionality.

9. Third-Party Services

We use the following third-party services:

• Google Analytics: For usage analytics (anonymized IP addresses)
• Sentry: For error tracking and monitoring
• DigitalOcean: For hosting and infrastructure
• Google Sign-In: For authentication (optional)

These services have their own privacy policies governing their use of your information.

10. Children's Privacy

Synthmon is not intended for children under 13. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our practices, contact us at: