1. Introduction

Website Monitor ("we", "us", "our") is a website monitoring service operated by Axeman Technology Solutions LLP, a company registered in India. This policy explains what information we collect from you, how we use it, and the rights you have over it. By using Website Monitor, you agree to this policy.

2. Account information we collect

We authenticate every user through their Keywords Everywhere ("KE") account. On every login we receive the following from KE's authentication endpoint:

• A unique Keywords Everywhere user ID. This becomes your account identifier on Website Monitor.
• Your encrypted email address. We decrypt this with a shared secret provided by Keywords Everywhere and store it on your account record.
• Your KE subscription plan name (Free, Bronze, Silver, Gold, or Platinum) and your remaining KE credit balance.
• Your KE plan expiry date.

We refresh all of the above on every successful login. We do not collect your password, your billing details, or any other Keywords Everywhere account data beyond what their authentication endpoint returns.

3. Monitoring data we collect

For every website you choose to monitor, we collect and store:

• The URL you submitted, exactly as you submitted it.
• The result of every uptime check we run against it: HTTP status code, response time, the time of the check, and whether it passed or failed.
• The result of every SSL certificate check: issuer, expiry date, validity.
• The result of every WHOIS check: expiry date, registrar.
• Incident records, generated automatically when a check fails twice in a row, recording when the incident started, when it ended, and the duration.

We do not crawl your website, read its body content, or store its content. We only record HTTP-level metadata that any visitor's browser would see.

4. Authentication and your Keywords Everywhere API key

When you log in, your Keywords Everywhere API key is sent to our server. We use it to authenticate you with Keywords Everywhere, and then we store it on your account record, encrypted at rest using AES-256-GCM with a server-side key that is never exposed to the client.

We re-encrypt and overwrite the stored value on every successful login so it stays in sync with key rotations in your Keywords Everywhere account.

We use the stored key to:

• Generate personalised Keywords Everywhere upgrade links inside your dashboard.
• (In future) Make Keywords Everywhere API calls on your behalf, such as for SEO checks. We will update this policy before introducing any such use.

Your API key is never logged, never embedded in URLs we visit, and never shared with third parties.

5. How we use this data

We use the data described above to:

• Run the scheduled checks you configured.
• Send you alerts when something needs your attention.
• Show you check history and incident records in your dashboard.
• Enforce the monitor limit for your Keywords Everywhere plan.
• Investigate abuse or technical issues affecting the service.

We do not use your data for advertising. We do not profile you. We do not sell your data to anyone.

6. Third-party services we use

A small set of third parties processes data on our behalf to make the service work:

• Keywords Everywhere authenticates you and is the source of truth for your identity and subscription plan. See their privacy policy at keywordseverywhere.com/privacy.html.
• SendGrid delivers alert emails. We pass them your decrypted email address and the alert content.
• Linode (Akamai) hosts our servers. Your data lives on their infrastructure.
• Browser push services (Chrome's FCM, Mozilla autopush, Apple's APNs, Microsoft's Edge service) deliver push notifications if you opt in. We send them encrypted payloads through your subscription endpoint; they pass the payload to your browser.

We do not use any analytics, tracking, advertising, or social media pixels.

7. No sale or sharing of personal data

We do not sell, rent, or trade your personal data. We do not share it with third parties beyond the operational services listed above. We will disclose data only if compelled by valid legal process, and then only the minimum necessary to comply.

8. Data retention

• Account data (your user ID, decrypted email, plan, encrypted API key, monitor list) is retained for as long as you have an active account.
• Check history (individual uptime, SSL, and WHOIS check results) is retained for 90 days per monitor. Older check results are automatically deleted.
• Incident records are retained for as long as the monitor exists.
• Server logs (request IPs, timestamps, status codes) are retained for 30 days for security and abuse investigation, then deleted.

When you delete your account, all of the above is removed within 30 days.

9. Cookies and sessions

We use one HTTP-only, secure session cookie to keep you logged in. Its lifetime is 30 days. It contains no personal information; it is an opaque session identifier that maps to your server-side session record. We do not use third-party cookies, advertising cookies, or any analytics cookies.

10. Your rights

You may at any time:

• View your account data and monitor list inside the dashboard.
• Export your check history and incident records (contact us for the export).
• Delete any individual monitor.
• Delete your account, which removes all data described in section 8.

If you are in the EU/EEA, UK, or California, the same rights apply under GDPR, UK GDPR, and CCPA respectively.

11. Children's privacy

Website Monitor is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have collected data from a child, please contact us and we will delete it.

12. Changes to this policy

We will update this page when we change how we collect or use data. Material changes will be announced via an email to your registered address.

13. Contact us

For privacy questions, data export requests, or account deletion:

support@keywordseverywhere.com

Or by post:

Axeman Technology Solutions LLP
B/502 Anisha Apartments, Yari Road
Versova, Mumbai 400061, IN