Privacy Policy

This Privacy Policy explains how Diffmon ("we", "us") processes personal data when you use the Service. If you use the Service on behalf of an organization, your organization is the Customer and controls the account configuration.

Controller

The data controller is: Jaroslav Sůva, Reg. No. (IČO): 71937501, registered address: Ohnišťanská 84/2, 193 00 Praha, Czech Republic.

Business use only

The Service is intended solely for business and professional use. We do not intentionally provide the Service to consumers.

What we collect (account and billing)

We process account data such as email address, name (if provided), workspace membership, and authentication metadata. Billing and subscription data is processed via Stripe, including customer and subscription identifiers. We do not store full payment card details.

What we collect (service usage and logs)

We process technical and usage data such as IP address, device/browser metadata, request IDs, security and audit logs, and operational events to operate the Service, prevent abuse, debug incidents, and maintain security.

What we collect (optional onboarding/profile)

You may optionally provide information such as how you heard about us, primary use case, industry, workspace country/region, role, team size, company size band, current tools/stack, buyer vs evaluator, and company domain/website. Providing this information is voluntary. It helps us tailor onboarding materials and prioritize improvements. You can update or remove these details later in settings.

What we collect (monitored targets and content)

The Service retrieves content from Customer-configured URLs or APIs and may store snapshots and diffs. This retrieved content may include personal data depending on what you monitor. The Customer is responsible for ensuring a lawful basis to monitor targets and process any personal data contained in retrieved content.

Legal bases

We process personal data to perform our contract with the Customer (account access, monitoring, alert delivery), to comply with legal obligations (including accounting and billing obligations), and for our legitimate interests (security, fraud prevention, service reliability, and product improvement).

Subprocessors

We use subprocessors to provide the Service, such as hosting providers, database and object storage providers, email delivery services, and Stripe for billing. Subprocessors are selected with appropriate safeguards.

International transfers

If personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as adequacy decisions, the EU–US Data Privacy Framework where applicable, and/or Standard Contractual Clauses.

Retention

We retain personal data only as long as necessary for the purposes described above. Snapshot, diff, and payload retention follows plan-based retention rules. Security logs and backups are retained for limited periods to maintain service integrity and comply with legal obligations.

Security

We implement technical and organizational measures designed to protect personal data, including access controls, encrypted transport (TLS), secure secret handling, and log redaction for sensitive data. No method of transmission or storage is 100% secure.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict processing of, or export your personal data, and to object to certain processing. To exercise your rights, please use the contact form available in your account at /app/profile.

Cookies and analytics

We use cookies and similar technologies. Cookies required for authentication, security, and core functionality may be set as necessary. We currently do not use analytics cookies in the Service; if we introduce analytics cookies in the future, we will request consent where required by applicable law.

Changes

We may update this Privacy Policy from time to time. If changes are material, we will provide notice within the Service.

Contact

For privacy-related questions or requests, please use the contact form available in your account at /app/profile.