Privacy Policy
Effective October 14, 2026
This policy explains what information RetainerPulse collects, why, and who processes it on our behalf. We collect only what the service needs to work and we don't sell personal data.
What we collect
- Account details: the email address you subscribe with, and the agency name and logo address you enter in the dashboard.
- Billing details: from Lemon Squeezy we receive your email, your plan, and the status of your subscription and its renewal dates. Card and payment details are handled by Lemon Squeezy and never reach us.
- Monitoring data: the websites and contact pages you add, the check results for them (pass/fail, error reasons, certificate expiry dates), and the monthly reports built from those results.
- Alert settings: the alert email address and webhook address (for example a Slack or Discord webhook) you choose.
- Instant scanner: the domain and page you enter are checked once and are not stored. Your IP address is used briefly for rate limiting, to prevent abuse, and is not stored either.
The websites we check are public pages. We read their certificates, DNS records and contact page, and we don't collect information about their visitors.
How we use it
- to run the checks, send alerts and produce your monthly reports;
- to sign you in and link your account to your subscription;
- to email you about your account, billing and important changes to the service.
We don't send marketing email to customers without their consent, and we don't use your data for advertising.
Who processes it
We use these providers to run the service. Each receives only what it needs:
- Cloudflare: hosts the website and runs the monitoring checks.
- Supabase: database and sign-in.
- Lemon Squeezy: checkout, payments, tax and invoicing, as Merchant of Record. Its own privacy policy covers the details you give it at checkout.
- Resend: sends alert and report emails.
- GitHub: runs the scheduled job that reads certificate expiry dates for monitored domains.
Some of these providers process data in the United States and other countries.
Cookies and tracking
We don't use advertising or analytics cookies. The dashboard keeps your sign-in session in your browser's local storage so you stay logged in. Signing out removes it.
How long we keep it
- Detailed check history is deleted after 45 days, once it has been summarized into the monthly reports.
- Monthly reports and account details are kept while your account exists.
- If you ask us to delete your account, we delete your account, sites and reports within 30 days. Billing records are kept by Lemon Squeezy as tax law requires.
Your rights
You can see and change most of your data in the dashboard. You can also email us to get a copy of your data, correct it or have it deleted, and we will reply within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA, including the right to complain to your local data protection authority.
Security
Connections use HTTPS. In the database, each agency can access only its own records, and the service's internal operations can't be called with public credentials. Report links contain a long random token, and you can revoke any of them from the dashboard.
Children
The service is for businesses and isn't directed at children under 16.
Changes
If we make material changes to this policy, we will email account holders before they take effect. The date at the top shows the latest version.
Contact
Privacy questions and requests: [email protected].