We collect as little as possible, isolate every workspace and encrypt what matters.
All traffic uses HTTPS/TLS. Secrets such as bot tokens and payment keys are encrypted at rest with AES-256-GCM.
Passwords are hashed with scrypt. Sessions are random, server-side and can be ended at any time.
Every query is scoped to your workspace, with roles for owners, admins and viewers.
Checks and webhooks canβt reach private networks, and logins and sign-ups are rate-limited.
Outbound HTTPS only, per-server tokens stored as hashes, read-only Docker access, no remote commands.
Card details are handled by Razorpay (PCI-DSS compliant). We never see or store card numbers.
The database is backed up daily and kept for a limited period.
Important account actions are recorded with time and IP address.
Delete monitors, workspaces or your account at any time. History is kept only as long as your plan allows.
Please report it privately to support@uptiq.live. We respond quickly and appreciate responsible disclosure.
Free forever for small projects. No credit card needed.