Privacy Policy

1. Data Controller

The controller of personal data is Isoconsult S.R.L., registered office at Str. Domneasca nr. 54, Galati, Romania, email:suport@omniwatchguard.com.

Official information about GDPR:eur-lex.europa.eu (EN) |gdpr-info.eu

2. What data we collect and why

Data you provide directly

• Name and email — required to create your account and for communication (legal basis: contract performance)
• Billing data — processed by Stripe for payments; we do not store card data ourselves (legal basis: contract performance)
• Monitored URLs and configurations — data you enter to use the service (legal basis: contract performance)

Data collected automatically

• IP address and session data — for security and abuse prevention (legal basis: legitimate interest)
• Usage data — pages visited, actions in the dashboard (legal basis: legitimate interest — service improvement)
• Cookies — as described in our cookie policy

3. How we use the data

• Providing and operating the monitoring service
• Sending configured alerts and notifications
• Processing payments and issuing invoices
• Account communication, updates and technical support
• Improving the platform based on usage statistics (Google Analytics, only with your consent)
• Complying with legal obligations

4. Who we share data with

We do not sell your data. The following third parties receive data, in the situations described below:

• Cloudflare: hosting, database, file storage and the bot protection check (Turnstile) on the registration form
• Stripe: payments and the billing portal; card data goes directly to Stripe and does not reach us
• Resend: sending account emails and alert emails
• Anthropic: AI analysis; it receives excerpts of the text of the pages you monitor (including pages monitored with a login session) and the messages typed in the chat assistant on the site
• Google Analytics 4 and Google Ads conversion tracking: loaded only after you accept analytics cookies in the cookie banner
• OpenAI (measurement pixel for ads in ChatGPT): loaded only after you accept analytics cookies; measures sign-ups that come from ads
• Google Fonts: font files; your IP address reaches Google when the fonts load
• Telegram, Slack, Discord or your own webhook address: only if you configure that alert channel; the alert content is then sent there
• ssl-checker.io, crt.sh, rdap.org: receive only the domain name of the monitored sites (SSL and WHOIS checks), no personal data
• Product Hunt, SaaSHub, AlternativeTo: small badge images in the page footer; your IP address reaches them when the image loads
• Gmail (Google): messages sent through the contact form are forwarded by email to the operator's mailbox
• Public authorities: when legally required

5. How long we keep the data

• Account data: kept for as long as the account exists. Accounts are not deleted automatically. You can delete your account from Settings in the dashboard, or ask us by email.
• Monitoring history: according to the plan: Trial 7 days, Starter 30 days, Pro 90 days, Agency 365 days. Older results are deleted automatically.
• Expired account: the monitoring history is kept for 30 days after the account expires, then deleted.
• Billing data: 10 years, per Romanian accounting obligations
• Notification log, verification codes and password reset tokens: kept until the account is deleted or until you ask us to delete them. There is no automatic deletion for these yet.
• Messages from the contact form and from request forms: kept until you ask us to delete them. There is no automatic deletion for these yet.
• Published reviews: kept until you ask us to remove them.

6. Your rights (GDPR)

Under GDPR, you have the following rights:

• Right of access — you may request a copy of your data
• Right to rectification — correction of inaccurate data
• Right to erasure — the "right to be forgotten" under GDPR conditions
• Right to data portability — export of your data in a structured format
• Right to object — to processing based on legitimate interest
• Right to restriction of processing — under certain circumstances

Data export

From Settings in the dashboard you can download a JSON file. The file contains: your account data (name, email, plan, notification email, language, creation and last update dates), the plan and status of your subscription, your monitors (address, name, type, frequency, status, alert settings), the most recent 1,000 check results (time, whether a change was found, the AI summary and severity) and the most recent 500 entries of the notification log. The file does not contain everything we hold: older results, the stored content of monitored pages, API keys, report links, branding settings, add-ons, reviews and the billing records kept by Stripe are not included. You can ask for these by email.

Account deletion

From Settings you can delete your account yourself. We first cancel the Stripe subscription; if the cancellation fails, the account is not deleted and you are asked to write to us. The deletion then removes: the account, the monitors and their check results, the notification log, password reset tokens and email verification codes, the subscription record, API keys, two-factor login sessions, report links, branding settings and the uploaded logo, add-ons and the referral record linked to the account.

The automatic deletion does not remove: published reviews, billing records that Stripe and we must keep for legal and accounting reasons, messages sent through the contact form and emails already delivered. These are removed on request, by email, where the law allows.

To exercise any of these rights, contact us atsuport@omniwatchguard.com. We respond within a maximum of 30 calendar days.

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):dataprotection.ro

7. Data security

We implement appropriate technical and organizational measures to protect data:

• HTTPS (TLS) for all connections to the site
• Data encrypted at rest (Cloudflare D1, AES-256)
• Passwords are stored only as hashes (PBKDF2)
• Optional two-factor authentication (authenticator app or email code)
• Session cookies supplied for login-protected monitors are stored encrypted
• Cloudflare infrastructure certified SOC 2 Type II and ISO 27001

8. Cookies and similar technologies

We store a small number of items in your browser that the service needs (login session, language, your cookie choice). Google Analytics 4, Google Ads conversion tracking and the OpenAI Ads pixel are loaded only after you accept analytics cookies. You can change your choice at any time from the cookie settings in the page footer. Full details in ourCookie Policy.

9. International transfers

Some of the providers listed in section 4 (for example Cloudflare, Stripe, Resend, Anthropic and Google) are based in the United States or may process data there or in other countries outside the EU/EEA. These transfers rely on the providers' Standard Contractual Clauses and, where the provider is certified, on the EU-US Data Privacy Framework.

10. Changes to this policy

We may update this policy periodically. For significant changes, we will notify you by email at least 14 days before they take effect. The current version is always available atomniwatchguard.com/en/privacy.

11. Contact regarding personal data

Email: suport@omniwatchguard.com
Or via our contact form.