Privacy Policy

1. Introduction

AlertStream ("we," "our," or "us") operates the FlowAlert mobile application and web platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

We collect information you provide directly to us and information generated through your use of the Service:

• Account Information: Name, email address, and password when you register.
• Workspace Data: Organization name, team members, and configuration settings.
• Event Data: Alert payloads, event keys, titles, bodies, and metadata sent to the Service via API.
• Device Tokens: Push notification tokens from your iOS or Android device, used solely to deliver notifications.
• Usage Data: Log data including IP address, browser type, pages visited, and timestamps.
• Communications: Messages you send us via email or contact forms.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Deliver push notifications to designated recipients
• Process and route alerts according to your routing rules
• Authenticate users and protect account security
• Respond to support requests and communications
• Monitor and analyse usage patterns to improve the Service
• Send transactional emails (account confirmations, billing receipts)
• Comply with legal obligations

4. Sharing of Information

We do not sell, trade, or rent your personal information. We may share information with:

• Service Providers: Third-party vendors who assist in operating our platform (hosting, authentication, analytics, payment processing). These parties are contractually obligated to keep your data confidential.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where the acquiring party agrees to honour this Privacy Policy.
• Your Consent: With your explicit consent for any other purpose.

5. Third-Party Services

The Service integrates with the following third-party services:

• Clerk: Authentication and user management. Subject to Clerk's Privacy Policy.
• Firebase Cloud Messaging (Google): Push notification delivery on Android. Subject to Google's Privacy Policy.
• Apple Push Notification Service (APNS): Push notification delivery on iOS. Subject to Apple's Privacy Policy.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Event data and notification history are retained for up to 90 days unless you request earlier deletion. You may request deletion of your account and associated data at any time by contacting us.

7. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@alertstream.io.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: