Privacy Policy
Last updated: October 20, 2026
This policy explains what personal data SmartAlert collects, why, and what rights you have. The controller of your personal data is Aleksei Nazarov, an individual entrepreneur registered in Georgia under identification number 304669179, with a registered address at Ponitchala settlement N3, building N5, hall N2, floor N4, auxiliary storage, Krtsanisi district, Tbilisi, Georgia ("SmartAlert", "we", "us"). Contact: [email protected].
1. Data we collect
Account data. Your email address, a hashed password, account status and email confirmation time, and the projects and teams you belong to. When you sign up, we also store where you came from: the referring site's domain and any campaign tags (`ref`, `utm_source`, `utm_medium`, `utm_campaign`) in the link you followed.
Service data. Contracts you monitor, metrics, alert rules, boards and notification settings. Contract addresses and on-chain data are public blockchain information.
Notification channels. The identifiers needed to deliver alerts to the Telegram chats you connect.
Billing data. Your plan, subscription status, and Paddle customer and subscription identifiers. Card and other payment details are collected and processed by Paddle; we never see or store them.
Enterprise requests. If you send an Enterprise request, the data you enter: email, name, company or protocol, networks, expected number of contracts, your message, and a Telegram username if you choose to be contacted there.
Technical data. Request logs (method, path, response status, user and project identifiers), used for security and troubleshooting. We do not log your IP address; to limit email abuse we keep a one-way hash of it for up to one hour.
Website analytics. On smart-alert.io and the sign-up and sign-in pages we count visits to understand which pages and sources bring visitors. For each page view we record: the page path and language, the referring site's domain (not the full address), campaign tags in the link, the button you clicked to sign up, your country (from Cloudflare), and the device type and browser family. We do not store your IP address or full browser identifier, and we do not set cookies or store anything on your device for analytics. To count unique visitors, we derive a one-way key from your IP address, browser identifier and the site using a random value that changes every day and is deleted after 25 hours, so visits cannot be linked across days or to your account. Visits by search engines and other automated agents are counted only as a total per agent name.
Cookies. We use only cookies that are necessary for the Service to work: sign-in session cookies and a device cookie used to keep your session secure. We do not use advertising or analytics cookies.
2. Why we use it and legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Provide the Service: accounts, projects, monitoring, alerts | Performance of our contract with you |
| Billing and subscription management | Performance of contract; legal obligation (accounting) |
| Service emails: confirmation, security, trial and billing notices | Performance of contract |
| Security, fraud prevention, troubleshooting | Legitimate interest in keeping the Service safe |
| Website analytics and sign-up source: counting visits and which sources bring users | Legitimate interest in improving the site and our marketing |
| Answering your requests, including Enterprise requests | Steps at your request before a contract, or legitimate interest |
We do not sell personal data and do not use it for advertising. If we start sending marketing emails, we will ask for your consent first.
3. Who we share it with
We share personal data only with providers that help us run the Service, under agreements that require them to protect it:
| Recipient | Role | Data |
|---|---|---|
| Paddle.com | Merchant of Record: payments, taxes, invoices, refunds. Paddle acts as an independent controller for payment data | Billing data, email, country |
| DigitalOcean | Hosting and databases | All Service data |
| Cloudflare | DNS, network protection | Technical data |
| Grafana Labs | Log storage and monitoring | Request logs |
| Resend | Sending Service emails | Email address, email content |
| Google Workspace | Our support mailbox | Messages you send us |
| Telegram | Delivering alerts to chats you connect | Alert content, chat identifiers |
We may also disclose data when required by law or to protect our rights and users.
4. International transfers
Our providers may process data outside your country, including in the United States and the European Union. Where data leaves the European Economic Area or the United Kingdom, we rely on the provider's Standard Contractual Clauses or an adequacy decision.
5. How long we keep it
- Account and Service data: while your account is active. When you ask us to delete your account, we delete this data within 30 days, except where we must keep it longer by law. A deleted project's data is removed with it; billing records are kept as described below.
- Billing records: as long as accounting law requires.
- Enterprise requests: while we discuss and serve your request; we delete them when you ask us to.
- Request logs: up to 30 days in our log storage. Short technical copies on our servers are overwritten automatically as they reach a size limit.
- Website analytics records: 13 months. The daily value used for the visitor key: deleted after 25 hours.
- Sign-up source: while your account is active, deleted with it.
- Monitored on-chain history is kept according to your plan's history depth and is public data.
6. Your rights
Depending on where you live, you can ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent where we rely on it. Write to [email protected]; we answer within 30 days. You have the right to complain to your local data protection authority.
7. Security
We protect data with encryption in transit, hashed passwords, access controls and limited staff access. No system is fully secure; report suspected issues to [email protected].
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their data.
9. Changes
We will post updates on this page and, for material changes, notify you by email before they take effect.
10. Contact
[email protected] · Individual Entrepreneur Aleksei Nazarov, Ponitchala settlement N3, building N5, hall N2, floor N4, auxiliary storage, Krtsanisi district, Tbilisi, Georgia