Privacy Policy

WebsiteChange is a website change monitoring service available at websitechange.com. The administrator of the websitechange.com service decides how and why personal data is processed in the service. For any question or request about your data, write to [email protected].

We collect only what we need to run the service.

• Account data. Your email address and a hash of your password. We never store your password in readable form.
• Signup code. A 6 digit code sent to your email to confirm the address, stored as a hash with the time it was sent and the number of attempts.
• Demo results. The URL you enter in the demo on the home page and the result we produce for it: the snapshot, the detected prices or text, and the sample change summary.
• Monitors and versions. The pages you watch, your settings, ignore rules, alert routes, and the stored versions of each page with text, structure, screenshots and summaries.
• Technical data. Your IP address, browser user agent, and the referrer and campaign parameters of the page that brought you to us, recorded at signup and on sign in.
• Billing data. Your name, billing address, tax details where required and payment card data are handled by a payment processor. We receive only the status of payments, the plan and limited card details such as the last four digits.
• Messages. Emails you send to [email protected] and our replies.

Monitored pages are public pages. If a public page you choose to watch contains personal data, it is stored as part of the page version. You must not use the service to collect personal data from websites.

• To create and run your account, deliver monitoring, alerts and reports, and provide the demo. Legal basis under the GDPR is the performance of a contract or steps taken at your request before entering into it.
• To bill your subscription, keep invoices and meet tax and accounting rules. Legal basis is a legal obligation and the performance of a contract.
• To keep the service secure, prevent abuse, enforce usage limits and investigate fraud or chargebacks. Legal basis is our legitimate interest in protecting the service and its users.
• To answer your messages. Legal basis is our legitimate interest in providing support, or the performance of a contract.
• To send service emails such as signup codes, alerts, billing notices and important changes to these terms. These are part of the service and are not marketing.

For residents of US states with privacy laws, we use personal data only for the purposes above. We do not sell personal data and we do not share it for cross context behavioral advertising.

We share personal data only with service providers that help us run WebsiteChange, under contracts that limit their use of it to our instructions. By category:

• our hosting provider, which stores the application and its data,
• a payment processor, which handles subscriptions and card payments,
• an email delivery provider, which sends signup codes, alerts and service emails,
• an AI model provider, which receives only the trimmed text difference of a public page to write a change summary, and never your account data.

We may also disclose data when the law requires it, for example to a court or a public authority, or to protect the rights and safety of our users and the service.

• Account data is kept while your account exists and deleted when you close it.
• Unconfirmed signups are deleted after a short period if the code is never entered.
• Page versions are kept according to your plan: 6 months on Starter, 2 years on Growth, 5 years on Business, and without a time limit or with custom retention on Enterprise. You can delete them earlier at any time.
• Demo results are kept for a limited time so the result page can be revisited, then deleted.
• Billing records are kept for the period required by tax and accounting law.
• Security logs are kept for a limited period needed to investigate abuse.

Depending on where you live, you have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent where processing relies on consent. Residents of US states with privacy laws can ask to know, correct and delete their data and will not be treated differently for using these rights.

To use any right, email [email protected] from the address on your account. We may ask you to confirm your identity before acting. If you live in the European Economic Area or the United Kingdom, you can also lodge a complaint with your local data protection authority.

Our service providers may process data in countries other than yours, including the United States and member states of the European Union. Where data leaves the European Economic Area, we rely on adequacy decisions or standard contractual clauses approved by the European Commission, together with the security measures described on our website monitoring security page.

We use only essential cookies that keep you signed in, protect forms against cross site request forgery and remember simple preferences such as the monthly or yearly toggle on the pricing page. We do not use advertising or tracking cookies. Details are in our cookie policy.

WebsiteChange is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, email [email protected] and we will delete it.

We may update this policy when the service or the law changes. The date at the top shows the latest version. If a change materially affects how we use your data, we will email account holders before it takes effect.

Questions about this policy go to [email protected]. See also our terms of service and refund policy.