Privacy notice
Who we are. Cameron Butler, cam@wlbr.app.
What we collect and why.
| Data | Purpose | Retention |
|---|---|---|
| Agency account: name, email, password hash, login records | Provide and secure your account | While the account exists, then deleted with the account |
| Branding: logo, display name, colour, footer text | Render your reports | While the account exists; removed with operational data after service ends |
| Domains you add and their verification challenges | Confirm you are authorised; know what to observe | While the domain is on your account |
| Public observations of your domains: DNS answers, certificate details, redirect and response headers | Produce changes, digests and reports | 90 days rolling; 30 days after service ends for export |
| Billing references from Paddle, our merchant of record: customer and subscription IDs, invoice status | Entitlement, refunds, accounting | As required for financial records, determined by our accountant |
| Support messages | Answer your questions | 24 months after the case closes |
| Digest and report delivery records | Know what was sent and when | 90 days |
We do not collect your clients' personal data, do not read email, do not crawl websites, and do not sell or share data for advertising. Support replies are drafted from approved templates. We do not currently send your messages to a language-model provider; if we introduce one, this notice will name the provider before it is used.
Providers. Hosting: Hetzner Online GmbH, Falkenstein, Germany. Payments: Paddle.com Market Ltd (merchant of record). Email delivery: Amazon Web Services (Simple Email Service), US East region; only the recipient address, subject and message body pass through it.
API tokens. Only a hash of each token is stored, so a copy of our database does not yield working credentials. Tokens are read-only and scoped to your own account.
Status pages. If you publish a status page, the hostnames and any client labels you add to it, and their availability, are readable by anyone with the address. It is marked not to be indexed but it is not password-protected. Add a client's site only with their agreement.
Client links. If you create a client link for a report, anyone who has that address can read that report until you revoke the link. Links are unguessable and marked not to be indexed, but they are not password-protected; do not post them publicly.
Your rights. Export your data from your account. Delete your account from your account page; operational data is removed within 30 days and backups expire within a further 35 days. Contact cam@wlbr.app for anything else, including rights under the New Zealand Privacy Act 2020.
Changes. We will notify account holders by email before material changes.