Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

LumiVerse d.o.o.
Croatia (EU)
Email: privacy@pagedrifter.com

PageDrifter ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website monitoring service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address when you sign up for our service (verified via email confirmation)
• Monitor Configuration: URLs you choose to monitor and your notification preferences
• Email Preferences: Your choices regarding digest frequency, notification types, and marketing communications
• Payment Information: Billing details processed securely through our payment provider (Stripe)

2.2 Information Collected Automatically

• Usage Data: How you interact with our service, including features used and pages visited
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

3. How We Use Your Information

We use your information to:

• Provide and maintain our website monitoring service
• Verify your email address during account registration
• Send daily digest emails summarizing changes detected on your monitored websites (configurable in your email preferences)
• Process payments and manage your subscription
• Improve our service and develop new features
• Communicate important updates about our service or your account
• Respond to your support requests and inquiries

3.1 Legal Basis for Processing (GDPR Article 6)

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide you with our monitoring service (account management, service delivery, notifications)
• Legitimate Interest: Processing for service improvement, security, and fraud prevention
• Consent: Marketing communications and optional features (you may withdraw consent at any time)
• Legal Obligation: Processing required to comply with applicable laws (e.g., tax records, legal requests)

3.2 Email Communications

We send the following types of emails:

• Transactional Emails: Account verification, password resets, and important account notices
• Daily Digest: A summary of changes detected across your monitored websites (sent at 8:00 AM UTC by default)
• Error Alerts: Notifications when we cannot access your monitored websites
• Product Updates: Optional emails about new features and improvements (you can opt out)

You can manage your email preferences or unsubscribe at any time using the link provided in every email we send.

4. Data Storage and Retention

We store your data securely using industry-standard encryption and security practices. Your data is hosted on servers located in the European Union.

4.1 Retention Periods

• Account Data: Retained while your account is active and for 30 days after account deletion
• Monitoring History: Change detection records retained for 12 months, then automatically deleted
• Payment Records: Retained for 7 years as required by tax and accounting regulations
• Server Logs: Retained for 90 days for security and debugging purposes
• Email Preferences: Retained until you modify them or delete your account

5. Data Sharing and Third-Party Processors

We do not sell your personal information. We share your data only with trusted service providers who process data on our behalf:

• Stripe (USA): Payment processing - receives billing information only
• Brevo (EU): Email delivery - receives email address and notification content
• Sentry (USA): Error tracking - receives anonymized technical data for debugging
• Hosting Provider (EU): Infrastructure - processes all data on EU servers

We may also share data when required by law or to protect our rights.

6. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data to these providers, we ensure appropriate safeguards are in place:

• EU-US Data Privacy Framework: Our US-based providers (Stripe, Sentry) are certified under the EU-US Data Privacy Framework
• Standard Contractual Clauses: Where applicable, we use EU-approved standard contractual clauses

Your primary data is stored and processed within the EU.

7. Your Rights (GDPR Compliance)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request transfer of your data to another service
• Object: Object to certain processing of your data
• Unsubscribe: Opt out of marketing emails and adjust notification preferences at any time

To exercise these rights, please contact us at privacy@pagedrifter.com. You can also manage your email preferences directly using the unsubscribe link in any email we send.

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies. You can control cookies through your browser settings.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, regular security audits, and access controls.

10. Children's Privacy

PageDrifter is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@pagedrifter.com and we will delete such information.

11. Data Breach Notification

In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR Article 34. We will also notify the relevant supervisory authority as required by law.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at:

Email: privacy@pagedrifter.com