Privacy Policy

1. Information we process

Depending on how you use WebChange, we may process: customer email addresses; API key prefixes and keyed hashes (not raw keys after issuance); account, entitlement, and plan metadata; billing identifiers from the hosted payment provider; watch configuration (names, monitored URLs, CSS selectors, intervals); webhook destination URLs; encrypted webhook signing secrets; execution and usage records; normalized page snapshots and content hashes; change events and diffs; webhook delivery metadata; support correspondence; and operational or security logs. Support-form rate limiting stores short-lived keyed hashes of network address and contact email—not the raw values. We do not store raw payment card numbers.

2. Purposes

We use this information to authenticate requests, run monitoring, detect changes, deliver notifications, enforce plan limits, bill for subscriptions, provide customer support, prevent abuse, secure the Service, and operate infrastructure.

3. Third-party providers

We use service providers that process information on our behalf where needed to operate WebChange, including: Stripe for hosted checkout and subscription payment; Railway for application and database hosting; and, when configured, a managed email provider (currently Resend) to deliver support-form messages to our support inbox. Providers process data under their own terms and may retain records for their legal or operational obligations.

4. Retention

Normalized snapshots are retained according to the Service’s snapshot retention policy (recent snapshots are kept, and snapshots referenced by retained change events may remain longer). Execution records, change history, account data, and logs are retained as needed to operate, secure, and bill for the Service, and may persist in backups for a limited period. Support-form bodies are not stored in the WebChange database; they may remain in email-provider systems and the support inbox. We do not currently offer an automated self-service purge of all historical monitoring data on a fixed calendar deadline.

5. Your rights and choices

Subject to applicable law and legitimate retention needs, you may request access, correction, or deletion of personal information associated with your Account by contacting support. We may need to verify your request and retain certain records for security, billing, or legal compliance.

6. Security

We implement technical and organizational measures appropriate to the Service, including hashed API keys, encrypted webhook secrets at rest, SSRF-conscious fetching, and access controls. No method of transmission or storage is completely secure.

7. Cookies, advertising, and children

The public WebChange site is primarily server-rendered documentation and checkout redirection. We do not operate advertising trackers or sell personal information. The Service is directed to businesses and developers, not children.

8. International processing

Infrastructure and providers may process information in the United States or other locations where they operate. If you access the Service from another region, your information may be transferred to those locations.

9. Changes and contact

We may update this Privacy Policy by posting a revised version with a new effective date. Privacy questions: [email protected] or support.