Privacy Policy

This policy explains what personal data SSLCanary collects when you use our SSL and domain-expiry monitoring service, why we collect it, who we share it with, and the rights you have over it. It is written to be read — if anything is unclear, contact us.

Who we are

SSLCanary ("we", "us") operates the domain-monitoring service at sslcanary.com. The data controller is Rapid Ventures OÜ (Estonian registry code 14133549), Sepapaja tn 6, 15551 Tallinn, Estonia. For any privacy question, contact privacy@sslcanary.com.

Data we collect

Account data you give us: your name, email address, and — for password sign-in — a hashed password; or, if you sign in with Google or Microsoft, the account identifier and verified email they return. Service data you add: the domains and endpoints you monitor, any groups, tags, and notes, and your notification-channel settings. Technical data we record to run the service securely: IP address, session, and an audit log of sensitive actions. Billing is handled by Stripe — we never see or store your full card number.

How we use it

To provide the monitoring service and send the SSL and domain-expiry alerts you configure; to authenticate you and keep your account secure; to take payment and manage your subscription; to answer support requests; and to meet our legal obligations. We do not sell your personal data, and we do not use it for advertising.

Legal bases (GDPR)

Where the GDPR applies, we process your data to perform our contract with you (providing the service and alerts), for our legitimate interest in keeping the service secure and improving it, to comply with legal obligations such as tax and accounting, and — where required — with your consent, which you may withdraw at any time.

Who we share it with

We share data only with the processors that run the service for us: Stripe (payments), our email-delivery provider (Postmark or Amazon SES) for alerts and account emails, and our hosting provider. Each is bound to protect your data and use it only to provide their service to us. If you set up a Slack, Teams, Discord, Telegram, or webhook alert channel, the alert content is sent to that destination at your direction. We may also disclose data where the law requires it.

International transfers

Some of our processors are based outside your country, including in the United States. Where we transfer personal data internationally, we rely on an appropriate safeguard, such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account and service data for as long as your account is active. If you close your account, we delete or anonymize your personal data within a reasonable period, except where we must keep certain records — such as invoices — to meet legal obligations.

Your rights

Subject to local law, you can ask us to access, correct, delete, export, or restrict the use of your personal data, and object to certain processing. To exercise any of these rights, contact us at privacy@sslcanary.com and we will respond within the time the law allows. If the GDPR applies to you, you also have the right to complain to your local data-protection authority.

Cookies

We use only the cookies strictly necessary to run the service: one to keep you signed in, and one to protect forms against cross-site request forgery. We do not use advertising or third-party tracking cookies, so there is nothing to opt into.

How we protect it

We serve everything over encrypted connections (TLS), hash passwords, and encrypt sensitive secrets such as notification-channel credentials at rest. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.

Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the date above and, where appropriate, notify you. Continuing to use the service after a change means you accept the updated policy.

Contact us

For any privacy question, or to exercise your rights, contact us at privacy@sslcanary.com or by post at Rapid Ventures OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia.