Privacy Policy

This policy explains what personal data okokumo collects, why, and your rights over it. For customers acting as GDPR data controllers, see also our Data Processing Agreement.

What we collect

• Account data: email address, hashed password (bcrypt — never stored or logged in plaintext), optional name.
• Organization data: organization name, member roles.
• Alert-channel configuration: destination email addresses, webhook/Slack URLs you configure.
• Billing data: handled directly by Stripe as an independent processor/controller — we never see your card details.
• Signup attribution: if you reach us through a campaign link, we record the campaign that brought you — the utm_source, utm_medium, utm_campaign and utm_content values carried in the link, our own placement code, the host of the site that referred you (never the page, never its query string), and the path of the first page you landed on (never its query string). It is stored once, on your organization, at the moment the account is created. We do not record your IP address, your browser or device, any advertising click identifier (such as gclid or fbclid), or anything that would let us or anyone else recognise you on another site. We use it only to count which placements produce signups, in aggregate, and we never share it.
• Usage analytics: via Plausible, a cookieless, privacy-first analytics tool — no personal identifiers and no cross-site tracking.

Why we process it

To provide the Service (account access, monitoring, alerting), to bill you for paid plans, to respond to support requests, and to improve the product via aggregate, non-identifying usage analytics.

Cookies and browser storage

We use no advertising cookies and no cross-site tracking, and there is no cookie banner because there is nothing on this site to consent to. Plausible, our analytics tool, stores nothing on your device at all.

Two things are kept in your browser. A session cookie signs you in to the app — it is strictly necessary for a service you asked for, and it needs no consent. And if you arrive through a campaign link, the campaign itself is held in your browser's storage so it survives the step from this site to the signup form. It contains no identifier of any kind, it is never sent anywhere except along with your own signup, it is deleted the moment your account is created, and it expires on its own after 13 months if you never sign up.

Where it's stored

On Scaleway infrastructure located in France. See our Security & data page for the full list of sub-processors and technical measures.

How long we keep it

For the lifetime of your account, then deleted or anonymized within a reasonable delay after account deletion — except where French or EU law requires longer retention (e.g. invoicing records, generally 10 years under French commercial law).

Monitoring data has limits of its own that run without you asking. Individual check results are deleted after 90 days. Output your job attaches to a failed heartbeat ping is deleted after 30 days, while the incident record itself — down at this time, back up at that one — is kept. Each of those is a floor rather than an exact date: deletion happens on the day it falls due or shortly after — within a week for a check result, within a day for captured output — and never before. Both windows apply on every plan, free included. The Security & data page explains them in full, including why the numbers are 90 and 30.

Signup attribution is erased from your organization 25 months after the organization was created, whether or not the account is still active — it serves no purpose beyond that point.

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure ("right to be forgotten").
• Request a portable export of your data — available at any time from your account settings.
• Object to or restrict certain processing.
• Lodge a complaint with your national data protection authority (CNIL in France).

To exercise any of these rights, contact us using the details in our legal notices.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated to active account owners in advance where reasonably possible.