Privacy policy

Created on 7 May, 2021 • 2,032 views • 6 minutes read

Last updated: October 24, 2025


1. INTRODUCTION


This Privacy Policy explains how Pavel Volkov (trading as 2Uptime) ("we", "us", "our") collects, uses, and protects your personal information when you use 2Uptime ("Service").


Service: 2Uptime - Uptime Monitoring Platform

Website: https://2uptime.com

Data Controller: Pavel Volkov (trading as 2Uptime)

Location: Cyprus

Contact: [email protected]


We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.


2. INFORMATION WE COLLECT


2.1 Information You Provide to Us:


Account Information:

- Email address (required for registration)

- Name (optional)

- Password (encrypted)

- Company name (optional)

- Phone number (if you choose SMS/voice notifications)


Payment Information:

- Billing address

- Payment details (processed by third-party payment processors - we do not store card numbers)

- Transaction history


Monitoring Configuration:

- URLs and domains you want to monitor

- Server IP addresses

- API endpoints

- Monitor names and settings

- Notification preferences


Contact Information for Alerts:

- Email addresses for notifications

- Phone numbers for SMS/voice alerts

- Webhook URLs

- Telegram, Discord, Slack account details


2.2 Information We Collect Automatically:


Usage Data:

- IP address

- Browser type and version

- Device type

- Pages visited

- Time and date of visits

- Referral source


Monitoring Results:

- Uptime/downtime records

- Response times

- HTTP status codes

- Error messages

- Performance metrics


Cookies and Similar Technologies:

- Session cookies (required for functionality)

- Analytics cookies (optional, with your consent)

- Preference cookies (optional)


2.3 Information from Third Parties:


We may receive information from:

- Payment processors (Paddle, PayPal, Stripe)

- OAuth providers (if you sign up with Google, etc.)

- Notification service providers (SMS, voice call confirmation)


3. HOW WE USE YOUR INFORMATION


We use your personal data for the following purposes:


3.1 Service Provision (Legal Basis: Contract Performance):

- Create and manage your account

- Perform uptime monitoring as configured

- Send downtime alerts and notifications

- Display monitoring statistics and reports

- Process payments and manage subscriptions


3.2 Service Improvement (Legal Basis: Legitimate Interest):

- Analyze usage patterns

- Improve monitoring accuracy

- Develop new features

- Troubleshoot technical issues

- Prevent fraud and abuse


3.3 Communication (Legal Basis: Contract Performance & Legitimate Interest):

- Send service-related emails (downtime alerts, system notifications)

- Respond to support requests

- Send important account updates


3.4 Marketing (Legal Basis: Consent):

- Send promotional emails (only with your explicit consent)

- You can unsubscribe at any time


3.5 Legal Compliance (Legal Basis: Legal Obligation):

- Comply with legal requirements

- Respond to lawful requests from authorities

- Enforce our Terms of Service


4. DATA RETENTION


We retain your personal data for as long as:


Active Account:

- Account data: Until you delete your account

- Monitoring logs: According to your plan (30-365 days)

- Payment records: 7 years (for tax compliance)


Deleted Account:

- Most data deleted within 30 days

- Backup copies may persist for up to 90 days

- Legal/tax records retained as required by law


You can request immediate data deletion by contacting [email protected]


5. HOW WE SHARE YOUR INFORMATION


We do NOT sell your personal data. We only share data with:


5.1 Service Providers:

- Payment processors (Paddle, PayPal, Stripe) - for billing

- SMS providers (Twilio) - for SMS notifications

- Voice call providers - for voice alerts

- Email service providers - for email notifications

- Cloud hosting providers - for data storage

- Analytics providers (Google Analytics) - only with your consent


5.2 Legal Requirements:

- When required by law

- To protect our rights or safety

- In response to valid legal requests


5.3 Business Transfers:

- In case of merger, acquisition, or sale of assets

- You will be notified of any change in ownership


6. YOUR RIGHTS UNDER GDPR


As an EU resident (Cyprus), you have the following rights:


6.1 Right to Access:

- Request a copy of your personal data

- We provide data within 30 days


6.2 Right to Rectification:

- Correct inaccurate personal data

- Update your information in account settings


6.3 Right to Erasure ("Right to be Forgotten"):

- Request deletion of your data

- We will delete data unless required by law


6.4 Right to Restrict Processing:

- Limit how we use your data

- Request via [email protected]


6.5 Right to Data Portability:

- Receive your data in machine-readable format

- Export available in account settings


6.6 Right to Object:

- Object to data processing for marketing

- Object to automated decision-making


6.7 Right to Withdraw Consent:

- Withdraw consent at any time

- Does not affect prior lawful processing


6.8 Right to Complain:

- Lodge complaint with Cyprus Data Protection Commissioner

- Contact details: https://www.dataprotection.gov.cy/


To exercise your rights, contact us at: [email protected]


7. DATA SECURITY


We implement appropriate security measures:


Technical Measures:

- SSL/TLS encryption for data transmission

- Encrypted passwords (bcrypt hashing)

- Secure data centers with physical security

- Regular security audits

- Firewall protection

- DDoS protection


Organizational Measures:

- Access controls (need-to-know basis)

- Employee confidentiality agreements

- Regular security training

- Incident response procedures


While we use industry-standard security, no system is 100% secure. We cannot guarantee absolute security.


8. INTERNATIONAL DATA TRANSFERS


Your data is primarily stored in:

- European Union data centers (GDPR compliant)


When data is transferred outside the EU:

- We use Standard Contractual Clauses (SCCs)

- We ensure adequate protection mechanisms

- Third-party processors comply with GDPR


9. COOKIES AND TRACKING


9.1 Essential Cookies (Always Active):

- Session management

- Authentication

- Security features


9.2 Analytics Cookies (Optional - Requires Consent):

- Google Analytics

- Usage statistics

- Performance monitoring


9.3 Preference Cookies (Optional):

- Language preferences

- Theme settings

- Dashboard layout


You can control cookies through:

- Browser settings

- Cookie consent banner on our website

- Account privacy settings


10. THIRD-PARTY SERVICES


Our Service integrates with third-party services:


Payment Processors:

- Paddle: https://paddle.com/legal/privacy

- PayPal: https://paypal.com/privacy

- Stripe: https://stripe.com/privacy


Notification Services:

- Twilio: https://twilio.com/legal/privacy

- Telegram: https://telegram.org/privacy

- Discord: https://discord.com/privacy

- Slack: https://slack.com/privacy


We are not responsible for third-party privacy practices.


11. CHILDREN'S PRIVACY


Our Service is not intended for children under 16. We do not knowingly collect data from children. If we discover such data, we will delete it immediately.


12. DO NOT TRACK SIGNALS


We do not currently respond to "Do Not Track" browser signals. You can control tracking through cookie settings.


13. CALIFORNIA PRIVACY RIGHTS (CCPA)


If you are a California resident, you have additional rights:

- Right to know what data we collect

- Right to delete personal data

- Right to opt-out of sale (we do not sell data)

- Right to non-discrimination


Contact us at [email protected] to exercise these rights.


14. AUTOMATED DECISION-MAKING


We do not use automated decision-making or profiling that significantly affects you.


Monitoring alerts are automated based on your configurations, but you control the settings.


15. DATA BREACH NOTIFICATION


In case of a data breach:

- We will notify affected users within 72 hours

- We will report to Cyprus Data Protection Commissioner

- We will provide details and remediation steps


16. CHANGES TO THIS PRIVACY POLICY


We may update this Privacy Policy:

- Changes posted at https://2uptime.com/page/privacy

- Material changes notified via email

- Continued use constitutes acceptance

- Last updated date shown at top


17. CONTACT US


For privacy questions or to exercise your rights:


Email: [email protected]

Website: https://2uptime.com

Data Controller: Pavel Volkov (trading as 2Uptime)

Address: Cyprus


For GDPR-related complaints:

Office of the Commissioner for Personal Data Protection (Cyprus)

Website: https://www.dataprotection.gov.cy/

Email: [email protected]


18. LEGAL BASIS SUMMARY


We process your data based on:

- Contract Performance: To provide the Service

- Legitimate Interest: To improve and secure the Service

- Consent: For marketing and optional features

- Legal Obligation: To comply with laws


19. DATA PROCESSING AGREEMENT (DPA)


If you use our Service to monitor resources containing personal data, a separate Data Processing Agreement may be required. Contact [email protected] for DPA.


20. YOUR CONSENT


By using 2Uptime, you consent to this Privacy Policy.


You can withdraw consent at any time by:

- Deleting your account

- Opting out of marketing emails

- Disabling optional cookies

- Contacting [email protected]


---


PRIVACY HIGHLIGHTS


✓ We do NOT sell your personal data

✓ We use encryption to protect your data

✓ You can delete your account and data anytime

✓ We comply with GDPR (EU regulations)

✓ You control your notification preferences

✓ Marketing emails only with your consent

✓ Data stored in secure EU data centers

✓ You have full rights to access, correct, or delete your data


For questions: [email protected]


---


This Privacy Policy is effective as of October 24, 2025 and complies with GDPR and Cyprus data protection laws.