Cronzy | Uptime Monitoring for Cron Jobs

1. Introduction

Cronzy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cron job monitoring service ("Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

Account Information: Name, email address, password, and timezone preferences
Payment Information: Billing address and payment card details (processed securely by Stripe)
Check Configuration: Names, descriptions, URLs, schedules, and alert preferences for your monitoring checks
Team Information: Names and email addresses of team members you invite
Communications: Messages you send to us for support or feedback
Integration Credentials: Webhook URLs, Slack/Discord tokens, and phone numbers for alerts (encrypted at rest)

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

Ping Data: Timestamps, IP addresses, and HTTP headers from ping requests to monitor your cron jobs
Usage Data: Features used, pages visited, and actions taken within the Service
Device Information: Browser type, operating system, and device identifiers
Log Data: Server logs including IP addresses, access times, and error information

2.3 Information from Third Parties

We may receive information from third-party services you integrate with, such as Slack workspace information or Discord server details, solely to enable alert delivery to those platforms.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Monitor your cron jobs and send alerts when jobs fail or run late
Process payments and manage subscriptions
Send administrative notifications (e.g., service updates, security alerts)
Respond to your comments, questions, and support requests
Analyze usage patterns to improve user experience
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following situations:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service:

Stripe: Payment processing
SendGrid: Email delivery for alerts and notifications
Cloud Infrastructure: Hosting and database services

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

All data is encrypted in transit using TLS/SSL
Sensitive data (API keys, webhook URLs, phone numbers) is encrypted at rest
Passwords are hashed using industry-standard algorithms (bcrypt)
Access to production systems is restricted and logged
Regular security assessments and monitoring

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

Account Data: Retained while your account is active and for 30 days after deletion request
Ping History: Retained based on your subscription plan (7 days to 1 year)
Audit Logs: Retained for 3 years for security and compliance purposes
Payment Records: Retained as required by law (typically 7 years)

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request limitation of processing in certain circumstances
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing of your personal data
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, you can use the data export and account deletion features in your account settings, or contact us at [email protected].

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, and shared
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at [email protected].

9. Cookies and Tracking

We use the following types of cookies and similar technologies:

Essential Cookies: Required for the Service to function (authentication, security)
Preference Cookies: Remember your settings (theme, timezone)
Analytics Cookies: Help us understand how you use the Service (requires your consent)

Cookie Consent Mechanism

We respect your privacy and comply with GDPR requirements for cookie consent. Here's how we handle cookies:

Analytics (PostHog): We use PostHog for product analytics to understand how users interact with Cronzy. This requires your explicit consent, which you can provide via the cookie banner that appears on your first visit.
Website Analytics (Plausible): We use Plausible Analytics for our public website, which is completely cookieless and privacy-friendly. No consent is required as it doesn't use cookies or track personal data.
Consent Storage: Your cookie preferences are stored in your browser's local storage for 12 months. After this period, you'll be asked to confirm your preferences again.
Managing Preferences: You can change your cookie preferences at any time using the link in any page footer, or by clicking the button above.

You can also control cookies through your browser settings, but disabling essential cookies may affect the functionality of the Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

11. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (e.g., email notification). Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Privacy Inquiries: [email protected]

General Support:

Data Protection Officer: [email protected]

14. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Contract: Processing necessary to provide the Service you requested
Legitimate Interests: Processing for fraud prevention, security, and service improvement
Consent: Processing based on your explicit consent (e.g., marketing communications)
Legal Obligation: Processing required to comply with applicable laws