Uptendr

Privacy policy

Last updated November 9, 2026

This page explains what Uptendr collects when you use Uptendr, why, who else sees it and what you can ask us to do with it. We collect only what we need to look after your apps, and we don't sell personal data or use it for advertising.

  1. 1. What we collect

    • Your GitHub account: your GitHub id, username, name, email address and avatar, from when you sign in with GitHub.
    • Access tokens: the tokens GitHub gives us to act for you. They are encrypted before they are stored.
    • Your apps: the repositories you connect, each app's name, live URL and the pages you ask us to check.
    • Check results: uptime results, browser check results, security findings, update plans and the pull requests we open.
    • Settings and billing status: your time zone, email preferences, plan, and the customer and subscription ids from our payment provider.
    • Security logs: a record of important actions (sign-ins, apps added, merges, plan changes) with the IP address they came from.
    • Visitor counts: on our public pages only, Cloudflare Web Analytics counts visits: the page, the site you came from, your country, browser type and how fast the page loaded. It uses no cookies and doesn't identify you. It doesn't count anything in your dashboard.

    We never see or store your card details. Payments are taken by Dodo Payments (see below).

  2. 2. Your code

    To scan, build and test your app, Uptendr reads your repository inside an isolated, throwaway container on our own check servers. Each job gets a GitHub token that works for that one repository and expires within an hour. The container and its copy of your code are deleted when the job ends. We keep the results (findings, log excerpts, test outcomes), not your code.

    When an AI fix runs, the error, related log lines and the files needed to fix it are sent to our AI model provider to draft a change. We send only what the fix needs, and only when a fix runs.

  3. 3. Why we use it

    • To run the checks, scans and fixes you signed up for, and to open pull requests on your repositories.
    • To email you alerts, your daily digest (which you can turn off) and important account notices.
    • To apply your plan's limits and keep your billing status up to date.
    • To keep Uptendr secure, investigate abuse and meet legal obligations.

  4. 4. Who else sees it

    We use a small number of providers, each only for its part of the service:

    • GitHub: sign-in and access to the repositories you choose.
    • Dodo Payments: our merchant of record. It takes payments, handles tax and invoices, and has its own privacy policy for that.
    • Resend: sends our emails.
    • Our AI model provider: drafts AI fixes from the error and the files involved.
    • Cloudflare: delivers and protects the site, and counts visits to our public pages.
    • Hosting and database providers: run Uptendr and store its data.

    We share data otherwise only if the law requires it, or with a buyer if Uptendr is ever sold, who would have to keep this policy's promises.

  5. 5. How long we keep it

    • Uptime results: 30 days.
    • Other check results and pull request history: while the app is connected. Deleting an app deletes them.
    • Your account: until you ask us to delete it. If your plan lapses, we keep your apps and history so you can pick up where you left off.
    • Security logs: kept for security and fraud prevention. They contain no source code.

  6. 6. Security

    Tokens are encrypted at rest, sessions can be signed out at any time, your code runs only in isolated containers, and Uptendr never pushes to your main branch: changes arrive as pull requests that you merge, or that Uptendr merges for you if you turn on auto-merge for an app.

  7. 7. Your choices and rights

    You can disconnect a repository or delete an app at any time, turn off the digest in Settings, and revoke Uptendr's access from your GitHub settings. You can also ask us for a copy of your data, to correct it, or to delete your account, by emailing [email protected].

    Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority.

  8. 8. Cookies

    We use one cookie to keep you signed in, and nothing for advertising or tracking. See the cookie policy.

  9. 9. Children and international transfers

    Uptendr is for people building software and isn't meant for children under 16. Our providers may process data in other countries; where that happens we rely on their standard safeguards for international transfers.

  10. 10. Changes

    If we change this policy in a way that matters, we'll email you before it takes effect. The date at the top shows the latest version.

Questions about this page: [email protected]