Privacy policy
Last updated August 27, 2026
SiteIntact is a website-monitoring service operated by SiteIntact. This policy describes what we collect, why, and what we do — and deliberately do not do — with it. It is written to be read, not skimmed past.
What we collect
Account information. Your name, email address, and a hashed password, managed by our authentication provider. We never see or store your password in plain text.
Monitoring configuration. The website URLs you add, alert and report recipient addresses, check settings, and integrations you connect.
Monitoring results. Availability checks, response times, TLS and DNS results, security and SEO findings, and crawled metadata about the public pages of the sites you monitor. This is data about websites, collected from their public surface — the same information any visitor's browser receives.
Usage records. An append-only audit log of significant actions in your workspace (who changed what, when) and metered usage counts that match what any invoice would say.
What we use it for
To run the service you signed up for: checking your sites, sending the alerts and reports you configured, showing you history, and enforcing plan limits. That is the whole list. We do not sell your data, rent it, or use it for advertising.
Who processes it
We run on a small set of infrastructure providers, each processing data only to provide their function: hosting and delivery (Vercel), database (Neon), transactional email (Resend), and — only when an AI feature is configured for your workspace — a model provider (OpenAI or Anthropic) that receives the computed facts being rephrased, never your credentials.
Cookies
We set session cookies to keep you signed in, and nothing else. No advertising cookies, no cross-site tracking, no fingerprinting.
Retention and deletion
Monitoring history is retained according to your plan and pruned automatically after that window. If you close your account, we delete your workspace's data within 30 days, except records we are legally required to keep. You can request an export or deletion at any time by contacting us.
Security
All traffic is encrypted in transit. Access to production data is limited to the people who operate the service. Sign-in attempts, password resets, and public endpoints are rate limited, and workspace data is isolated per tenant at the query layer.
Changes and contact
If this policy changes materially, we will note it here with a new date and, for significant changes, tell you by email. Questions or requests: contact SiteIntact at the address on your invoice or through the email any of our messages come from.