Privacy Policy

1. Information We Collect

When you use alertmewhen.ai, we collect the following types of information:

• Account Information: Your email address, name, and password (hashed) when you register for an account.
• Alert Data: The alert queries you create, their descriptions, frequency settings, and notification channel configurations.
• Notification Channel Data: Contact information you provide for receiving notifications, such as phone numbers, email addresses, webhook URLs, and chat IDs.
• Usage Data: Information about how you interact with our service, including alert history and notification logs.
• Billing Data: If you subscribe to a paid plan, our payment processor (Stripe) collects and stores your payment details. We only receive limited information such as the last 4 digits of your card, expiry, brand, billing country, and invoice history.
• Google Account Data: If you sign in with Google, we receive your email, name, and profile picture from Google.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the alertmewhen.ai service.
• Process and deliver your alert notifications through your chosen channels.
• Analyze alert conditions using AI to determine when to trigger notifications.
• Send you service-related communications, such as password reset emails, billing receipts, and account deletion confirmations.
• Process payments and manage your subscription.
• Protect against fraud, abuse, and unauthorized access.

3. Third-Party Services

We use the following third-party services to operate alertmewhen.ai:

• OpenAI: To analyze alert conditions and determine when alerts should be triggered. Your alert queries are sent to OpenAI for processing.
• Postmark: To send email notifications, password reset emails, and transactional account emails.
• Twilio: To send SMS and WhatsApp notifications.
• Stripe: To process subscription payments and manage billing. Stripe handles all card data; we never see or store your full card number.
• Google: For optional OAuth authentication.

Each third-party service has its own privacy policy governing the use of your data.

4. Data Storage and Security

Your data is stored in a secure PostgreSQL database. Passwords are hashed using bcrypt with a cost factor of 12. Sessions are encrypted and stored server-side. We implement reasonable security measures to protect your personal information, but no method of transmission over the internet is 100% secure.

5. Data Retention

We retain your account data for as long as your account is active. Alert history is maintained to provide you with a record of past notifications. You can delete your account and associated data at any time from the settings page; doing so permanently erases your alerts, reminders, notification channels and history. Some records (such as past invoices and payment receipts) may be retained for the period required by applicable tax and accounting laws.

6. Your Rights

You have the right to:

• Access and review the personal information we hold about you.
• Update or correct your personal information.
• Delete your account and associated data at any time from the settings page.
• Opt out of non-essential communications.

7. Cookies and Sessions

We use session cookies to maintain your logged-in state. These are essential for the service to function and expire after 7 days of inactivity. We do not use tracking cookies or third-party analytics cookies.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of any material changes via email. Your continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at the email address associated with your account.