Privacy Policy

Last updated 08 Aug 2026

This is a starting-point template, not reviewed legal advice. Have it checked by a lawyer before relying on it commercially.

This Privacy Policy explains what Paull Studio ("we", "us") collects when you use the Service, and how it's used.

1. Information we collect

Account information — name, email address, and password (stored hashed, never in plain text).
WhatsApp number — only if you turn on WhatsApp notifications, used solely to deliver alerts.
Website data — the URLs you add for monitoring, and the status data collected about them (uptime, SSL/domain details, security findings, SEO and performance results).
Usage data — basic activity like login times, used for account security and to operate the admin panel.

2. How we use it

Account and website data is used to run the monitoring checks you configure, show you the results, deliver the notifications you've opted into, and generate the reports and client portal pages you choose to create. We don't sell your data.

3. Third-party services

Some data is shared with third parties strictly to provide the features you use:

WhatsApp notifications — delivered through a messaging provider (Fonnte); your phone number and the alert text are sent to them for delivery only.
Email notifications — delivered through our transactional email provider.
Google Analytics — only if you explicitly connect a Google account, to read GA4 data for a website you specify. You can disconnect this at any time.
Public data sources — security and performance checks query public services (e.g. plugin vulnerability databases, Google PageSpeed Insights) using the public details of a monitored site, not your account data.

4. Data retention

We keep account and website data for as long as your account is active. If you disable or remove a website, its monitoring history is retained for a limited period before being cleared. You can request deletion of your account and its data at any time.

5. Your rights

You can access, correct, or request deletion of your personal data by contacting us. If you're acting as a super admin, disabling an account does not delete its data — it only blocks login.

6. Security

Passwords are hashed, not stored in plain text. Access to another user's data is not possible through the normal application — only a super admin account can see account-level information across users, for support and moderation purposes.

7. Changes to this policy

We may update this policy from time to time. Continued use of the Service after a change means you accept the updated policy.

8. Contact

Questions about this policy, or a data request, can be sent to cs@paullstudio.com.