Privacy Policy

1. What we collect

• Account data: your email address and name, your plan and credits, and your credit transactions.
• What you put into the services: for example the addresses and settings of monitors, report definitions and their results, shop data (products, stock, team members), API keys and the values you store. Secrets such as monitor and report headers are stored encrypted, and API keys and tokens are stored only as a hash.
• Usage records: which service actions you used and what they cost, request logs of an API when you turn logging on (time, key, result and a short anonymous id of the caller, never the value or an address), and counters used to limit requests per minute.
• Forms: the form you build (with its logo and cover image, which are public), the responses people send (whatever you ask for, including files they upload), the people you shared it with, any custom address, view and response counts, and a short anonymous marker used to limit one response per device and to stop abuse. We do not read your responses; they are yours.
• Status Pages: the page you build (components, incidents, maintenance) and the email addresses of people who subscribed to it, kept only while subscribed.
• Messages we send you in your inbox and by email (for example report emails and account emails). We also send emails on your behalf: a status page's updates to the people who subscribed and confirmed their address, and a form's notification to you and automatic reply to the address a respondent typed.
• Payments: our payment provider handles your card or bank details. We receive only the subscription and payment status.
• Browser storage: we use only what the site needs to work (your sign-in session, your theme, and small markers such as which notices you have seen). We do not use advertising or tracking cookies.

2. Why we use it

To provide the services you ask for, take payments, keep your account and the site secure, prevent abuse, and talk to you about your account. We do not sell your personal data.

3. Who helps us run the site

We share data only with companies that process it for us, for the purposes above:

• Supabase, for the database, sign-in and file storage;
• Dodo Payments, for subscriptions and payments;
• Brevo, for sending report, account, status page and form emails;
• Cloudflare Turnstile, to tell people from bots on sign-in pages and on public forms (when enabled);
• our hosting provider (GoDaddy), whose server runs the site and also serves the custom domains of forms and status pages;
• Slack and Google (Sheets), only when you add a Slack or Google Sheets webhook, and Discord likewise: it receives the event data you choose to send (for a form, the answers people typed).

4. If you answered a form or subscribed to a status page

The person or company that made the form or the status page decides what is asked and why, and is the one responsible for that data. SoftwareTrinkets only runs the service for them, so for a copy, a correction or a deletion please ask them first. Subscribers can leave a status page at any time with the unsubscribe link in every email. Unconfirmed subscriptions are removed after 3 days. If you cannot reach the owner, write to support@softwaretrinkets.com and we will help.

5. How long we keep it

• Uptime Monitor check results and usage logs: 30 days. Per-minute checks: 2 days.
• Auto Reports: only the finished numbers and chart points of each run, 30 days on the Free plan and up to 365 days on paid plans. Raw spreadsheet rows are never saved. Report recipients (email addresses the owner adds, who confirm first) are kept until they unsubscribe or are removed; unconfirmed ones are removed after 30 days. Alerts that fired are kept a year.
• Inbox messages and their attachments: 30 days.
• Inventory stock history: 365 days. A shop's data stays until the owner deletes it or the account is deleted.
• API request logs: 30 days.
• Status Pages: incidents, maintenance and state changes for 90 days (Expert) or 365 days (Business); subscriber emails while subscribed.
• Forms: responses and uploaded files until the owner deletes them (or the form); view and response counts 400 days. Files nobody submitted are removed after a day.
• Credit transactions and admin actions: kept, because they are the record of credit changes.
• Account data: until the account is deleted.

6. Security

Data is protected with access rules in the database, encrypted secrets, hashed keys and tokens, and checks on the server for every action. No system is perfectly safe, so please keep your sign-in and API keys private.

7. Your choices and rights

You can ask us for a copy of your data, to correct it, or to delete your account and its data. There is no button for this yet: write to support@softwaretrinkets.com from your account's email address and we will answer within 30 days. Some records (credit transactions) may be kept where we need them to show what happened on the account.

If you think we handle your data wrongly, you can also complain to the data protection authority where you live.

8. Children

The services are not meant for people under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy. If a change matters, we tell you on the site or in your inbox.