Privacy Policy
Last updated: 12 July 2026
This Privacy Policy explains how Data Products LLP ("SiteMonit", "we", "us", "our"), a limited liability partnership organised in Ontario, Canada, collects, uses and shares information when you use the SiteMonit website and service at sitemonit.com (the "Service"). It should be read together with our Terms of Use.
1. Who we are
Data Products LLP is the controller responsible for your personal data under this Policy. For any privacy question or request, contact us at [email protected].
2. Information we collect
| Category | Examples |
|---|---|
| Account data | Email address, hashed password, plan, account settings, and email-verification status. |
| Monitoring configuration | The URLs you register, capture settings (area/element, frequency, device, actions), and the notification channels you connect (e.g. Telegram chat id, Slack/Discord/webhook endpoints, Viber id, email). |
| Captured content | Screenshots, page text/HTML snapshots and computed diffs of the third-party pages you choose to monitor, stored so we can compare captures over time and show you what changed. |
| Billing data | Plan and subscription status, invoice history, and limited card metadata (brand and last four digits). Full card numbers are handled by our payment processor — we never receive or store them. |
| Usage & technical data | Log data such as IP address, browser/user-agent, request times and error events; engagement signals (e.g. whether an alert was opened) used to run the Service and prevent abuse. |
| Cookies | A session cookie/token to keep you signed in. See Section 6. |
3. How we use your information
- Provide the Service: fetch and render the pages you monitor, detect changes, and deliver alerts through your chosen channels.
- Operate your account, process payments, and send transactional messages (verification, receipts, password resets, service notices).
- Secure the Service and prevent abuse, fraud and overload of our systems or of third-party sites.
- Maintain and improve reliability and quality of change detection.
- Comply with legal, accounting and security obligations.
Where our processing is governed by laws such as the GDPR, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and prevent abuse); your consent (where required, e.g. optional communications); and legal obligation (e.g. tax records). You may withdraw consent at any time where consent is the basis.
4. How we share information
We do not sell your personal data. We share it only as needed to run the Service:
- Service providers (processors) acting on our instructions: hosting and storage providers, our payment processor (Stripe/PayPal) for billing, and proxy/network providers used to fetch the pages you monitor.
- Notification channels you connect: when you configure a channel (email, Telegram, Slack, Discord, webhook, Viber), we send your alerts and related content to that provider or endpoint at your direction.
- Legal and safety: where required by law, to enforce our Terms, or to protect the rights, safety and security of our users, the Service or the public.
- Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.
5. Third-party pages you monitor
The pages you choose to monitor belong to third parties we do not control. We access and capture them only to provide the Service to you, and the captured material remains the property of its respective owners. You are responsible for ensuring your monitoring of a given site is lawful (see the Acceptable-use section of the Terms).
6. Cookies
We use a small number of strictly necessary cookies/tokens to keep you signed in and to operate the site securely. We do not use advertising cookies. Cloudflare, our CDN, may set essential cookies to route and protect traffic. You can clear cookies in your browser, but the Service will not work while signed out.
7. Data retention
We keep account and configuration data for as long as your account is active. Captures and check history are retained to power the diff timeline and are subject to your plan and to periodic cleanup. Notification and engagement logs are retained for a limited period for reliability and abuse prevention and then deleted or aggregated. When you delete your account, we delete or anonymise your personal data within a reasonable period, except records we must keep for legal, security or accounting reasons.
8. Security
We use technical and organisational measures to protect your data — including encrypted transport (HTTPS), hashed passwords, access controls and network protections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to incidents.
9. International transfers
We and our service providers may process data in countries other than your own, including Canada and other jurisdictions where our infrastructure or processors operate. Where required, we put appropriate safeguards in place for such transfers.
10. Your rights
Depending on where you live, you may have rights to access, correct, delete, export or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. You can manage much of this directly: update your details or delete your account from your settings, or disconnect a notification channel at any time. To make a request or ask a question, contact [email protected]. You also have the right to complain to your local data-protection authority.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
12. Browser extension
Our Chrome extension (“SiteMonit — monitor this page”) is a shortcut to the service described in this policy: it lets a signed-in user create and configure a monitor for the page open in the current browser tab. Everything above applies to it; in addition:
- What it reads in your browser. Only when you click the extension icon, it reads the address and title of the current tab to pre-fill the monitor and to check whether that page is already monitored. If you choose “Pick an element”, the CSS selector of the element you click is included in the monitor settings. Page content is not read or sent otherwise, and nothing runs on pages until you click.
- What it stores in your browser. Your SiteMonit session token and a short-lived cache of reference data (channel types, check locations, plan limits) are kept in the browser’s extension storage so you stay signed in. A half-filled monitor form or a picked element is kept in memory-only storage that clears when the browser closes. Signing out on sitemonit.com invalidates the session; uninstalling the extension removes all of this data.
- Where data goes. The extension communicates exclusively with sitemonit.com over HTTPS. It contains no analytics, advertising or third-party code and does not execute remote code.
- Signing in. The extension has no login form of its own: you sign in on sitemonit.com, and on sitemonit.com pages only the extension picks up that login. This never happens on other websites.
- “Monitor as me” (optional). If you tick this box when creating a monitor, the extension asks your browser for access to the current website (a one-time Chrome prompt naming that site), reads that site’s cookies once — analytics and advertising cookies are left out — and includes them in the monitor’s settings, so the SiteMonit service can capture the page as you see it when signed in. The cookies are stored with that monitor on SiteMonit (see “Data we collect” above), not by the extension; they are never read unless you tick the box, and you can remove them by editing or deleting the monitor. Only use this on sites whose session you are comfortable entrusting to SiteMonit.
- Permissions. storage — stay signed in; activeTab and scripting — read the current tab’s address and, on request, run the element picker there; alarms — check every 5 minutes how many monitors have unseen changes to show a number on the icon; cookies plus per-site access you grant — only for “Monitor as me”; host access to sitemonit.com — talk to our API.
Questions about the extension: [email protected].
13. Changes to this Policy
We may update this Policy from time to time. We will update the "Last updated" date above and, for material changes, provide reasonable notice. Continued use of the Service after changes take effect means you accept the updated Policy.
14. Contact
Questions or privacy requests: [email protected] — Data Products LLP, Ontario, Canada.