Privacy Policy

1. Introduction

Web Guardian LTD ("we", "us", or "our") operates the WebGuardian platform (webguardian.io). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller:
Web Guardian LTD
Bulgaria, Sofia, zh-k. Mladost 1, 148
Email: yoansredkov@webguardian.io

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and company name when you register
• Payment Information: Billing address and payment details processed securely through Stripe
• Service Configuration: URLs, IP addresses, and endpoints you add for monitoring
• Communication Data: Messages you send us through support channels
• Phone Number: If you opt-in to SMS notifications for security alerts

2.2 Information Collected Automatically

• Usage Data: How you interact with our platform, features used, and actions taken
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and pages viewed
• Cookies: Session cookies for authentication and preferences

2.3 Information from Third Parties

• Security Intelligence: Threat data from security feeds to protect your monitored assets
• Payment Processing: Transaction confirmations from Stripe

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To provide uptime monitoring, security scanning, and alerting services
• Account Management: To create, maintain, and secure your account
• Notifications: To send alerts via email, SMS, Discord, Slack, or other configured channels
• Billing: To process payments and manage subscriptions
• Support: To respond to your inquiries and provide customer service
• Improvement: To analyze usage patterns and improve our platform
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with legal obligations and enforce our terms

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: For security, fraud prevention, and service improvement
• Consent: For SMS service notifications (where you opt-in)
• Legal Obligation: To comply with applicable laws and regulations

5. SMS/Text Message Communications

If you opt-in to receive SMS/text message notifications from WebGuardian, we will send you security alerts and service notifications to your mobile phone number. By providing your phone number and enabling SMS notifications in your account settings, you expressly consent to receive these automated text messages.

SMS Program Details

• Program Name: WebGuardian Alerts
• Message Types: Security alerts, service downtime notifications, service recovery notifications, and critical account updates
• Message Frequency: Message frequency varies based on your configured alert settings and the status of your monitored services. You control which services trigger SMS alerts.
• Opt-Out: You can opt-out at any time by replying STOP to any message. You will receive a confirmation message and no further SMS messages will be sent.
• Help: Reply HELP to any message for assistance, or contact us at yoansredkov@webguardian.io
• Message & Data Rates: Message and data rates may apply. Check with your mobile carrier for details.
• Carriers: Carriers are not liable for delayed or undelivered messages.

Your phone number is used solely for delivering the service notifications you have requested through the WebGuardian platform. We use Twilio as our SMS service provider to deliver these messages. Mobile information collected as part of the SMS opt-in process will not be shared with any third parties for their own marketing or promotional use.

6. Data Sharing and Disclosure

We may share certain information with service providers who help us operate our platform. These providers only process data on our behalf and are contractually prohibited from using it for their own marketing purposes:

• Stripe (payment processing) — stripe.com/privacy
• Twilio (SMS delivery only) — twilio.com/legal/privacy

Important: Your mobile phone number is shared with Twilio solely for the purpose of delivering SMS notifications you have requested. Twilio does not use your phone number for their own marketing. We do not share your mobile phone number or SMS consent data with any other third parties.

We may also disclose information when:

• Required by law, court order, or governmental authority
• In connection with a merger, acquisition, or sale of assets
• To protect our rights, privacy, safety, or property

We do not sell, rent, or share your personal data or mobile phone number with third parties or affiliates for their marketing or promotional purposes.

7. Data Storage and Security

Your data is stored on secure servers located in the European Union. We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 30 days for backup purposes, and longer where required by law (e.g., financial records for tax purposes). Monitoring logs and security event data are retained based on your subscription plan settings.

9. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at yoansredkov@webguardian.io. We will respond within 30 days.

10. Cookies

We use essential cookies to maintain your session and remember your preferences. We may also use analytics cookies to understand how our service is used. You can control cookie settings through your browser. Disabling essential cookies may affect the functionality of our service.

11. Children's Privacy

Our service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

12. International Transfers

Your data is primarily stored within the EU. Where we transfer data outside the EU (e.g., to US-based service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Web Guardian LTD
Bulgaria, Sofia, zh-k. Mladost 1, 148
Email: yoansredkov@webguardian.io

You also have the right to lodge a complaint with a supervisory authority, such as the Commission for Personal Data Protection (CPDP) in Bulgaria.