Privacy Policy

Last updated: November 29, 2025

1. Introduction

Misty Step ("we", "us", or "our") operates Heartbeat, an uptime monitoring service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information that you provide directly to us:

  • Account information (email address, name)
  • Payment information (processed securely by our payment provider)
  • Monitor configurations (URLs, check intervals, notification preferences)
  • Communications with us (support requests, feedback)

We automatically collect certain information:

  • Log data (IP address, browser type, pages visited)
  • Device information (operating system, device identifiers)
  • Usage data (features used, actions taken)
  • Monitoring data (response times, status codes from your monitored endpoints)

3. How We Use Your Information

We use collected information to:

  • Provide and maintain our Service
  • Process transactions and send related information
  • Send notifications about your monitored services
  • Respond to your comments, questions, and support requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent or unauthorized activities
  • Improve our Service and develop new features

4. Information Sharing

We do not sell your personal information. We may share information with:

  • Service providers who assist in operating our Service
  • Professional advisors (lawyers, accountants) as needed
  • Law enforcement when required by law or to protect our rights
  • Other parties in connection with a merger, acquisition, or sale

5. Data Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Monitoring data is retained for 90 days by default. You may request deletion of your data at any time.

7. Your Rights

Depending on your location, you may have the right to:

  • Access, update, or delete your personal information
  • Object to or restrict processing of your information
  • Data portability (receive your data in a structured format)
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority

8. Cookies and Tracking

We use essential cookies to operate our Service. We do not use tracking cookies or third-party analytics that follow you across websites. You can control cookies through your browser settings.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us at hello@mistystep.io.