Privacy Policy

Who we are

WatchPage.ai is operated by C-Vids Productions (UEN 53119647W), 9002 Tampines Street 93, #03-36, Singapore 528836. This policy explains what personal data we handle when you use WatchPage.ai, why, and what you can ask us to do with it.

Our handling of personal data is governed by Singapore's Personal Data Protection Act (PDPA).

What we collect and why

We collect what the service needs to watch your pages and alert you.

• •Account data — your email address and password (handled by our authentication provider, Supabase), and, if you add them, your name, company name, timezone, agency name and agency logo.
• •Monitors — the URLs, CSS selectors, names and settings you enter.
• •Check results — the text and values we extract from the pages you monitor, page snapshots, HTTP status codes, and change events with the before and after values.
• •Screenshots — page thumbnails, and, for monitors that use a browser check, screenshots stored in our file storage and reachable through an unguessable link.
• •Alert channel details — the email address alerts go to, your Telegram chat id (and, if you use your own Telegram bot, its token and chat id), a Slack webhook URL if you save one, and the URLs and signing secrets of webhooks you add.
• •Billing data — your Stripe customer and subscription ids, plan, status and billing period end. Card details are collected and held by Stripe, not by us.
• •API keys — stored as a hash with a short prefix, never in full.
• •Messages you send us — feedback and the email address you send it from.
• •Usage analytics — aggregated page views on our site through Vercel Web Analytics.

The pages you monitor

WatchPage fetches the pages you choose from our servers and stores what it needs to detect changes. If a page you monitor contains personal data about other people, you decide to monitor it and you are responsible for having a lawful reason to do so.

Subprocessors

We use the following third parties to run the service. Each processes data only to provide its part of it.

• •Supabase — database, authentication and file storage, hosted on AWS in ap-south-1 (Mumbai, India).
• •Vercel — application hosting and Web Analytics.
• •Stripe — payment processing.
• •Resend — delivery of alert, onboarding, digest and support emails.
• •Telegram — delivery of alerts, if you connect Telegram.
• •Browserless — runs a headless browser for monitors that use a browser check; it receives the monitored URL.
• •Anthropic — analyses browser check results to suggest a diagnosis; it receives the monitored URL and the check results.
• •thum.io — generates page thumbnails; it receives the monitored URL.

Transfers outside Singapore

Our database is hosted in India and our other providers operate outside Singapore, so your data is transferred overseas.

How long we keep data

A daily cleanup job deletes the following automatically:

• •Page snapshots older than 14 days, and any beyond the latest 50 per monitor.
• •Monitor run records and finished check jobs older than 7 days.
• •Finished alert delivery jobs and notification records older than 30 days.
• •Alert records older than 90 days.

What we keep until you ask us to delete it

Everything else — your account, monitors, change history, alert settings, screenshots and browser check results — is kept while your account exists.

There is no self-service account deletion yet. To have your account and data deleted, email us at the address below.

Security

The measures we apply to protect data in the service are:

• •Postgres row-level security on every table, so a query only returns rows that belong to the signed-in account.
• •HTTPS for data in transit.
• •API keys stored as hashes, and outgoing webhooks signed so you can verify they came from us.

Your rights under the PDPA

You may ask us for access to the personal data we hold about you, ask us to correct it if it is inaccurate or incomplete, and withdraw your consent to our using it. Withdrawing consent may mean we can no longer provide the service to you.

Send requests to the address below.

Cookies

WatchPage.ai sets session authentication cookies. They keep you signed in and are required for the dashboard to work.

We do not use advertising trackers.