Privacy Policy

StatusHive ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal data when you use our website monitoring service at statushive.dev. This policy complies with the General Data Protection Regulation (GDPR - EU 2016/679) and the French Data Protection Act.

We collect the following personal data:

Account data: email address, hashed password, account creation date.
Usage data: monitors configured (URLs, check intervals), status pages created, incidents reported, notification preferences.
Technical data: IP address, browser user agent, access logs, session tokens.
Payment data: billing information is processed by Lemon Squeezy; we store only your subscription status and plan type.
Monitoring data: response times, HTTP status codes, SSL certificate data for your configured monitors.

We process your data based on:

• Contract performance (Article 6(1)(b) GDPR): to provide the monitoring service you subscribed to.
• Legitimate interest (Article 6(1)(f) GDPR): to improve and secure our Service, and to send essential service communications.
• Consent (Article 6(1)(a) GDPR): for optional analytics cookies and marketing communications, when applicable.

We use your personal data to:

• Provide and maintain the monitoring service
• Send alert notifications (email, Slack, Discord) when your monitors detect issues
• Process payments and manage your subscription
• Improve the Service and fix technical issues
• Send essential service communications (maintenance notices, security alerts)
• Comply with legal obligations

We share your data with the following third-party processors, all of which are GDPR-compliant:

We do not sell your personal data to any third party.

We retain your data as follows:

• Account data: for the duration of your account, plus 30 days after deletion.
• Monitoring data: according to your plan (7 days for Free, 90 days for Starter, 365 days for Pro).
• Payment records: 10 years as required by French tax law.
• Access logs: 12 months maximum.

You may request deletion of your data at any time by contacting privacy@statushive.dev.

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to restriction: limit how we process your data
• Right to data portability: receive your data in a structured format
• Right to object: object to data processing based on legitimate interest
• Right to withdraw consent: withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at: privacy@statushive.dev. We will respond within 30 days. You may also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.3) and at rest
• Row-level security in our database
• Regular security audits
• Access controls and principle of least privilege
• Automatic session expiration

Some of our sub-processors are located outside the EU (United States). These transfers are secured by Standard Contractual Clauses (SCCs) approved by the European Commission, and/or the sub-processor's Data Processing Agreement.

For any questions about this Privacy Policy or to exercise your rights:

StatusHive - Data Protection
Email: privacy@statushive.dev

You may also contact the CNIL:
CNIL - 3 Place de Fontenoy, TSA 80715 - 75334 Paris Cedex 07
https://www.cnil.fr