1. Who is responsible
The data controller is DEBRUSK s.r.o., Mukařovského 1985/5, 155 00 Praha 5, Czech Republic, Company ID: 09999973, VAT ID: CZ09999973 - a Czech company subject to the EU GDPR. Contact for anything privacy-related: hello@sitebot24.com.
2. What we collect and why
- Account data - your email address (used as your login and for alerts/reports), sign-in sessions, and one-time login codes (stored only as non-reversible hashes). Legal basis: performance of contract.
- Rate-limit data - the IP address of sign-in code requests, kept to throttle abuse of the login flow. Deleted within 24 hours. Legal basis: legitimate interest (security).
- Monitored-site data - URLs and hostnames you add, check results (HTTP status codes, response times, SSL/domain expiry metadata, SEO findings), content hashes and short excerpts/diffs used to detect changes, and incidents derived from them. Legal basis: performance of contract.
- Billing data - handled by Polar as Merchant of Record. We never see or store your card number; we store only your plan, subscription status and Polar identifiers. Legal basis: performance of contract, legal obligations.
- Emails we send - alerts, weekly reports and login codes to your account address. We keep a copy of generated reports in your account.
We do not sell personal data and we run no advertising or tracking.
3. How long we keep data
- Raw check results: 90 days, then deleted automatically.
- Daily aggregates (uptime percentage, average response time): kept for the lifetime of the account, so long-term statistics keep working.
- Incidents and reports: for the lifetime of the account.
- One-time login codes and their IP records: up to 24 hours.
- Sign-in sessions: up to 30 days without activity.
- Account deletion: on request via hello@sitebot24.com; billing records are retained where tax law requires it.
4. Processors and sub-processors
- Huko.net (Czech Republic) - hosting of the application and database. All monitoring data lives on a server in the EU.
- Polar Software, Inc. - Merchant of Record for payments; processes your billing details under its own terms and privacy policy.
- efik.cz (Czech Republic) - transactional email delivery (alerts, reports, login codes).
AI provider
Plain-language incident explanations and report texts are generated by an OpenAI-compatible API provider (api.openai.com). Data processing region declared for this provider: EU (to be confirmed at key setup).
For this purpose we send the provider only:
- the hostname and URL of the affected monitored site,
- the incident type and a short technical summary of what our checks found,
- for content-change incidents a short excerpt (diff) of the changed text - never full copies of your pages,
- for weekly reports, aggregate numbers per site (uptime percentage, number of checks and incidents).
We never send the AI provider your login data, email content, payment data, or full page content.
5. Your rights
Under the GDPR you can request access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to hello@sitebot24.com - we respond within 30 days. You can also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz) or your local supervisory authority.
6. Cookies
One strictly necessary session cookie; details in the Cookies policy.
7. Changes
We update this policy when the Service changes (for example when the AI provider configuration changes - section 4 reflects the current configuration automatically). Material changes will be announced by email.