Privacy Policy

• Account details: your name, email address, team name and team membership, through our sign-in provider. If you sign in with another account, such as Google, we receive your name and email from it.
• Billing details: your plan, subscription status and payment history. Card and bank details go to Razorpay and never reach our servers.
• What you set up: monitors (URLs, hosts, headers, request bodies, assertions), alert channels (email addresses, webhook URLs and integration keys), status pages and secrets. Secrets are encrypted with AES-256-GCM before they are stored.
• Check results: status, timing and error details from each check. For browser and AI agent checks, this can include screenshots and page content of the sites you monitor, which may show personal data if those pages do.
• Activity records: an audit log of changes made in your team, and server logs that include IP addresses, used for security and to stop abuse.
• The free website scan: if you use the scan on our homepage without an account, we process the URL you enter and your IP address.

• to provide the service you signed up for: run checks, store results and send alerts;
• to take payments and keep accounting records;
• to send service emails, such as alerts, receipts, security notices and changes to these policies;
• to keep the service secure, enforce rate limits and prevent abuse;
• to meet legal obligations, such as tax law.

We process your data because you asked us to provide the service and agreed to these terms, or because the law requires it. We do not use your data or check results to train AI models, and we do not send you marketing email without your consent.

We use these service providers to run obsrvly. Each one handles data only on our instructions and only for the purpose listed:

For AI agent checks, the content of the monitored page is sent to Groq so the AI model can run the check. We send only what that check needs.

Alerts go to the channels you choose, such as Slack, Microsoft Teams, Discord, Telegram, PagerDuty or your own webhook. Once delivered, their handling is governed by those services' own policies.

We may disclose data when the law requires it, for example in response to a valid court order, and we will tell you unless the law forbids it. If obsrvly is sold or merged, your data moves with it under this policy, and we will tell you before that happens.

Our servers and databases are in the United States. Checks run from the regions you choose for each monitor (currently US West, EU West and Singapore), and their results are stored in the United States. By using obsrvly, you understand that your data is processed outside India, as Indian law permits.

• Account data, monitors and check history: while your team exists.
• Screenshots from failed browser and AI agent checks: 14 days.
• Detailed AI agent run traces: 7 days for passing runs, 30 days for others.
• Server logs: up to 30 days.
• Billing and payment records: as long as Indian tax and company law requires, currently up to 8 years.

When you delete a team, we delete its monitors, results, channels, secrets and status pages from our live systems. We keep only the billing records the law requires, and a record that the team was deleted, which holds no personal data, so we do not bill it again.

• All traffic to obsrvly uses HTTPS.
• Secrets are encrypted at rest, and we filter them out of logs and out of what the AI model is sent.
• Each of our services has its own database login with access to only its own data.
• Only the people who run obsrvly can reach production systems, and only when they need to.

If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires, with what happened and what we are doing about it.

We use only the cookies needed to keep you signed in and secure. We also store your theme choice (light or dark) in your browser. We do not use advertising or cross-site tracking cookies. If we add analytics, we will update this policy first.

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete data that is wrong or out of date;
• delete your data, unless the law requires us to keep it;
• name someone to exercise these rights for you if you die or become unable to.

You can change most of your data yourself in the app, and delete your team from its settings. For anything else, email support@obsrvly.com. We may need to confirm your identity first. We reply within 30 days.

If you live outside India, you may have similar rights under your local law, and we will honour them on the same terms.

If you have a complaint about how we handle your personal data, contact our Grievance Officer at support@obsrvly.com. We acknowledge complaints within 2 business days and resolve them within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

obsrvly is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

We will post changes here and update the date at the top. For a material change, we will email account owners at least 30 days before it takes effect. See also our Terms of Service.