New Multi-region uptime checks and custom-domain status pages

Data Retention & Deletion Policy

How we store, retain, and permanently delete your data.

Last updated: September 12, 2026

This page describes the customer data ServiceAlert stores, the normal retention period for each category, and the available deletion and privacy-request processes.

You can delete your account from Settings. Customer data is removed from the live service after a successful deletion; encrypted disaster-recovery backups rotate within the period described below.

What we store about you

When you sign up for ServiceAlert.ai, we store the minimum necessary to operate your account and deliver the features you configure:

Data category Purpose Retention
Account identity (email, name, company) Authentication and support Until account deletion
Uptime monitor configurations Running the checks you configure Until you delete the monitor or your account
Monitor check results (response times, status codes, SSL cert data) Dashboard graphs, SLA reports, incident history Personal: 90 days · Pro/Business: 90 days · Enterprise: 1 year
Alert history (emails sent, Slack/Teams posts, webhooks fired) Debugging alert delivery, cooldown tracking 90 days
Web Analytics and real-user measurements (page paths, daily anonymous session hashes, events, Web Vitals, coarse heatmaps, country/region/city/ASN) Traffic, conversion, and user-experience reporting 90 days
Opt-in JavaScript error diagnostics (redacted message, pathname-only source URL, sanitized stack, coarse browser/device/country) Application error reporting when explicitly enabled for a site 90 days
Coarse geolocation lookup cache (/24 IPv4 or /64 IPv6 prefix, country, region, city, ASN and organization) Avoiding repeated external geolocation lookups; full IP addresses are not stored 30 days
SSL monitor & legacy certificate records Basic expiry and TLS health monitoring Until you delete the cert or your account
Incident history (declared incidents, post-mortems, timelines) Metrics dashboard, public status page history Until you delete the incident or your account
API keys & push subscriptions Programmatic access, browser push notifications Until revoked or account deleted
Billing records (Stripe customer ID, plan history) Processing subscription payments 7 years (legal/tax retention)
Customer feedback and publication consent Product improvement and approved customer stories Until account deletion or a deletion request

Community problem reports

You can submit a problem report without an account. The service, symptom and submission time are kept for 90 days. A daily salted network hash and approximate location support abuse prevention and the report map; these details are removed after 48 hours.

On GitHub and Zscaler, optional product, platform, broad region and recovery check-ins expire 24 hours after the original report. Expired details are removed on the next receipt request or scheduled cleanup, which runs every five minutes. Public summaries show separate groups of at least three distinct daily network identifiers, with repeat reports grouped together. They do not expose individual receipts or link the selected details to each other.

A private receipt key is saved in your browser so you can update your report without signing in. It cannot be used after 24 hours and is removed from browser storage the next time the page checks it. Clearing site storage removes your local key; it does not delete the original report. We store only a hash of that key on the server.

What we do NOT store

How to delete your data

Option 1: Delete individual items

You can delete individual monitors, certificates, API keys, and incidents at any time from the respective section of your dashboard. These deletions take effect immediately and remove all associated check history, findings, and alert logs.

Option 2: Delete your entire account

From Settings → Account → Danger Zone, click "Delete my account" and confirm by typing DELETE MY ACCOUNT. This is immediate and cannot be reversed.

When you delete your account, we purge all of the following in a single transaction:

Account deletion is processed as one operation. If it cannot be completed, the account remains available and an error is shown. After a successful deletion, you are signed out.

Go to Settings

Backups

We run automated PostgreSQL backups daily for disaster recovery. Backups are:

When you delete data (an account or individual items), the deletion takes effect immediately in the live database. However, the deleted data may persist in backups until those backups are rotated out of storage. This is a standard pattern for all SaaS products; a short retention window balances disaster recovery needs with your right to erasure. No data that you have deleted is ever restored from backup into the live system unless you explicitly request it during a disaster-recovery scenario.

Your rights under GDPR, CCPA, and other regulations

Right to access

You can view all data we hold about you at any time by logging in and browsing your dashboard, settings, and monitor detail pages. If you want a machine-readable export of everything we have, email privacy@servicealert.ai with "Data export request" in the subject line. We will respond within 7 days.

Right to erasure (right to be forgotten)

Use the self-service deletion from Settings — it immediately purges your data from the live database. Backup retention is capped at 3 days as described above. If you need faster backup purging for a specific legal reason, email privacy@servicealert.ai.

Right to rectification

Edit your profile from Settings → Profile Information. For corrections that aren't self-serviceable, email privacy@servicealert.ai.

Right to portability

Uptime, SSL monitor, and legacy certificate data can be exported from their respective dashboards. For a full account export in JSON format, email privacy@servicealert.ai.

Right to object to processing

If you object to specific processing (for example, you no longer want us to run a particular monitor or cert check), you can delete the relevant item from your dashboard. If you need to object to a class of processing we don't offer granular controls for, email privacy@servicealert.ai.

Data processing locations

All ServiceAlert.ai data is stored on Azure infrastructure. Database and application servers are located in the US East (Virginia) region. We use third-party processors for specific features:

ServiceAlert browser extension

Version 1.1 checks the service associated with the current tab only when you open the popup. It does not poll in the background or inspect page contents.

Questions or requests

Email privacy@servicealert.ai for any question about data handling, retention, deletion, or your privacy rights. We respond within 5 business days and fulfill formal requests (access, erasure, portability) within 7 days.

This policy supersedes any prior data-retention guidance. Material changes will be announced on the changelog and reflected in the "Last updated" date at the top of this page.