Privacy Policy — Tibzi

1. Introduction

Tibzi ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable laws.

2. Data We Collect

2.1 Account Information

Email address (required)
Name (optional)
Profile image (via OAuth providers)
Timezone preference

2.2 Monitoring Data

URLs and endpoints you configure for monitoring
Check results (response time, status codes, SSL/domain expiry)
Incident history and status page configurations

2.3 Billing Data

Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status but never store credit card numbers or bank details on our servers.

2.4 Usage & Analytics

IP addresses (for rate limiting and security)
Browser type and version
Pages visited and feature usage (anonymized)

3. How We Use Your Data

To provide and improve the monitoring Service
To send alerts when monitors detect issues
To process payments and manage subscriptions
To communicate service updates and security notices
To prevent abuse and maintain platform security

4. Third-Party Services

We share data with the following processors:

Stripe — Payment processing
Resend — Transactional email delivery
Twilio — SMS and WhatsApp alerts
Anthropic (Claude) — AI-powered analysis (Business+ plans; monitoring data only, no personal data)
Sentry — Error tracking (anonymized technical data)

Each processor is bound by their own privacy policies and data processing agreements.

5. Data Retention

Check results: Retained according to your plan (30–730 days)
Incidents: Retained for the lifetime of your account
Account data: Retained until you delete your account
Logs: Server logs are retained for 90 days

6. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

Access: Request a copy of your personal data
Rectification: Update inaccurate personal data via your Settings page
Erasure: Delete your account and all associated data from the Settings page
Data Portability: Export your data in JSON format from the Settings page
Restriction: Request restriction of processing by contacting us
Objection: Object to processing based on legitimate interests

To exercise these rights, use the relevant features in your account Settings or contact us at hello@tibzi.com.

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), secure session management, and role-based access controls. All infrastructure is hosted within the European Union.

8. International Transfers

Our monitoring checks originate from multiple regions (EU, US, Asia) but monitoring data is stored on EU-based servers. Third-party processors may process data outside the EU under Standard Contractual Clauses or equivalent safeguards.

9. Children

The Service is not directed to individuals under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Policy periodically. Material changes will be communicated via email to registered users.

11. Contact & Data Protection Officer

For privacy-related inquiries, contact us at hello@tibzi.com.