Privacy Policy
CodaURL helps you monitor HTTPS endpoints and get notified when something changes. This policy explains what we collect, why we collect it, and the choices you have. CodaSky LLC ("CodaURL," "we," "us," or "our") operates the Service.
1. Information We Collect
1.1 Account
- Email address
- Password (stored as a hash only; plain-text is never stored)
- Plan, monitor quota, and other account entitlements
- Session information needed to keep you signed in
1.2 Monitor Configuration and Results
- HTTPS URLs you add, expected HTTP status codes, and check intervals
- Check results, including status, HTTP code, latency, error details, and check time
- Status transition and notification history (channel type and result summary)
1.3 Notification and Device Data (optional, when feature is used)
- Mobile push: device push token and operating system (iOS or Android)
- Telegram Chat ID, Webhook URL (when configured by the user)
- Browser Web Push subscription data (when the feature is used)
1.4 Billing and Subscription (when upgrading to a paid plan)
- Subscription status, product identifier, and billing account identifiers
- The email associated with your CodaURL account for subscription support
- Payment details such as card numbers are handled by the app store or billing provider, not by CodaURL.
1.5 Service Operation Logs
- Request times and limited technical information such as IP address and User-Agent
- Diagnostic and security logs used to keep the Service reliable and prevent abuse
1.6 Analytics and diagnostics
- On the website, Google Analytics 4 may collect page views, browser and device information, approximate location, and website interactions through cookies or similar technologies.
- In the mobile app, analytics may collect screen views, app interactions, approximate location, and device or installation identifiers.
- Mobile crash reporting may collect crash logs, diagnostic information, app version, device platform, the screen where an error occurred, and your account user ID while you are signed in. We use the user ID to match errors to support requests.
What we do not collect: Precise GPS location; contacts, photos, microphone, or camera data; or advertising identifiers for third-party ad tracking.
2. How We Use Your Information
- Create and manage your account
- Check the URLs you choose and show their status
- Send alerts, including push notifications, email, Telegram, or webhooks you enable
- Apply plan limits and manage subscriptions
- Keep the Service secure, reliable, and easy to improve
- Meet legal obligations and respond to support requests
3. Data Retention
- Account information is kept until you delete your account or ask us to delete it. A short recovery period may apply.
- Check and notification history is kept according to your plan and then deleted or anonymized.
- Push tokens are removed when they are invalidated, removed from your account, or reported as unregistered.
- Some information may be kept longer when required by law or needed to resolve a dispute.
4. Service Providers and Sharing
We work with trusted service providers that help us run the website and app, deliver notifications, measure product usage, process subscriptions, and prevent abuse. They may process information only as needed to provide those services and under their own privacy terms.
- Analytics and diagnostic providers — website analytics, mobile analytics, and crash reporting
- Push notification providers — delivery of alerts to Android and iPhone
- App stores and subscription providers — in-app subscriptions and receipt verification
- Telegram Bot API — alert delivery when the user has linked a Chat ID
- User-specified Webhook endpoints
We do not sell your personal information to third parties for marketing purposes. We may disclose information when required by applicable law, for example in response to lawful government requests.
AI review uses Cloudflare Workers AI to generate technical comments about monitoring results and to check generated comments for unsafe content. If we select a model from another provider through AI Gateway, that provider also processes the model input. Generation inputs contain monitoring signals, bucketed status, uptime, latency and SSL summaries, and error or HTTP codes. Safety checking also processes the generated comments. We do not send monitor URLs, names, request headers, response bodies, account emails, account IDs, or credentials to these models. Provider processing and retention depend on the selected service and its applicable terms and configuration. If you use the API with another AI tool, that tool may separately process the data you choose to send or retrieve under its own terms.
AI comment reports
When you submit an AI comment report in the app, CodaURL stores the selected reason, the reported comment and its code and generation time, the monitor ID, and your account ID so our support team can investigate. Monitor names, URLs, and credentials are not included in the report. Reports are scheduled for deletion 30 days after submission, or removed earlier when your account is permanently deleted.
5. International Data Transfers
Your information may be processed or stored outside your country of residence. When that happens, we use appropriate safeguards and limit the transfer to what is reasonably necessary to provide the Service.
6. Your Rights
- View and update account information and notification settings (app or web console)
- Delete monitors, disable push notifications, or remove device tokens
- Delete your account and associated data directly within the app (Settings → Account → Delete Account), or by emailing support@codaurl.com. Account deletion removes your personal data within 30 days, except where retention is required by law. After local account erasure, we retain the minimum provider lookup identifier needed to complete a service-provider deletion request. Completed requests are removed from the processing queue after 30 days. Limited security and administrative audit records may be retained to prevent abuse or meet legal obligations. Deleting your CodaURL account does not cancel an App Store or Google Play subscription; cancel renewal in the store separately.
- Request data access, correction, erasure, or processing restriction: support@codaurl.com
Requests are processed within a reasonable time after identity verification. Where applicable law permits a refusal, we will provide an explanation.
7. Children
The Service is not directed at children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect personal information from children.
8. Security
- Encryption in transit
- Password hashing
- Access controls and monitoring designed to protect account and service data
No security measure is absolute. In the event of a confirmed breach, we will take action and notify affected users as required by applicable law.
9. Mobile App (Android / iOS) Specifics
- Notifications permission is requested only if you want outage and recovery alerts.
- Internet access is needed to use account and monitoring features.
- Biometric authentication, such as Face ID or fingerprint unlock, is processed on your device. We never receive raw biometric data.
- The app does not access your precise location, contacts, photos, microphone, or camera.
10. Changes to This Policy
We may update this policy as the Service evolves. When changes are material, we will post the new version here and may also notify you in the app or by email. Your continued use of the Service after the effective date means the updated policy applies to you, where permitted by law.
11. Contact
Questions or privacy requests can be sent to support@codaurl.com. We may ask you to verify your identity before completing a request.