Privacy Policy
Last updated: April 14, 2026
1. Information We Collect
We collect information you provide directly: account details (name, email), monitor configurations (URLs, selectors), payment information (processed by Dodo Payments), and usage data. We also automatically collect server logs, IP addresses, browser type, and usage analytics.
2. How We Use Your Information
Your data is used to: operate the monitoring service, send change notifications, process payments, improve our product, provide customer support, and comply with legal obligations. We do not sell personal data to third parties.
3. Data Storage & Security
Monitor data (page snapshots, screenshots, diffs) is stored in encrypted S3-compatible storage. Database connections use TLS. Passwords are hashed with industry-standard algorithms. API keys are stored as hashed tokens. We retain change history per your plan (7-90 days, or unlimited).
4. Third-Party Services
We use: Dodo Payments for billing, Anthropic Claude API for AI change summaries (diff text is sent for analysis), SMTP providers for email notifications, and Playwright for page rendering. Each provider has their own privacy policy.
5. Your Rights
You may: access, correct, or delete your account data at any time; export your monitor configurations and change history; request complete account deletion; and opt out of non-essential communications. Contact us at privacy@onchange.dev.
6. Cookies
We use essential cookies for authentication sessions and preferences (theme, locale). We do not use tracking cookies or third-party advertising cookies. Analytics are privacy-respecting and cookieless.
7. GDPR Compliance
For EU users: our legal basis for processing is contract performance (monitoring service) and legitimate interest (product improvement). You have the right to data portability, erasure, and to lodge complaints with your local DPA. Our data processing adheres to GDPR Article 6 and 9 requirements.
8. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email and in-app notification at least 30 days before taking effect.
Contact
For privacy inquiries: privacy@onchange.dev