Privacy Policy
This policy explains what data Revive processes and why. We aim to collect only what is needed to run monitoring, accounts, and billing.
1. Who we are
Revive is an early-access uptime monitoring service. Infrastructure includes hosting for the web app, a database/auth provider (Supabase), edge workers (e.g. Cloudflare), and optional payment processing (Stripe).
2. Data we collect
- Account data: email, password hash (via auth provider), display name, username, profile fields you set.
- Service data: monitor URLs and settings, check results, incidents, status page config, alert channel endpoints, team membership, messages you post in workspaces.
- Billing: handled by Stripe; we store plan/subscription references, not full card numbers.
- Technical logs: IP addresses, user agent, and error logs as needed to operate and secure the Service.
3. How we use data
- Provide checks, dashboards, alerts, and team features you enable
- Authenticate you and enforce plan limits
- Prevent abuse (rate limits, fraud, unauthorized access)
- Improve reliability and fix bugs
- Send service-related messages (e.g. security or billing notices)
We do not sell your personal data.
4. Sharing
We share data only with processors that help run the Service, for example:
- Supabase — database and authentication
- Cloudflare / hosting — application and worker runtime
- Stripe — payments when you subscribe
- Email providers (e.g. Resend) — if email alerts are enabled
We may disclose information if required by law or to protect the Service, users, or the public from serious harm.
5. Security measures we take
- Row Level Security so users primarily access their own rows
- Service-role keys kept on servers/workers, not in the browser
- HMAC signatures on internal worker APIs
- HTTPS for the public app
- API keys stored hashed when you create them
No system is perfectly secure. You should use a strong password, protect invite links, and rotate webhook secrets.
6. Retention
We keep account and monitoring data while your account is active and for a reasonable period afterward for backups, disputes, or legal needs. You may request deletion of your account data subject to technical and legal limits.
7. Children
The Service is not directed at children under 13 (or the minimum age in your region). Do not sign up if you are under that age.
8. International transfers
Providers may process data in the United States or other countries. By using the Service you understand that processing may occur outside your home country.
9. Your choices
- Update profile data in the app
- Revoke API keys and alert channels
- Control cookie preferences (see Cookie Policy)
- Contact us to request access or deletion where applicable
10. Changes
We may update this policy. The “Last updated” date will change when we do. Continued use means you accept the revised policy.
This is a clear early-access privacy notice, not formal legal counsel. A lawyer can adapt it for your jurisdiction (GDPR, CCPA, etc.).