Privacy Policy

Last updated: February 2026

1. Introduction

NotifyBee ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website change monitoring service. We comply with applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Data We Collect

Account Information

  • Email address — used for authentication, notifications, and communication
  • Name — optional, for personalization
  • Password — stored as a secure hash, never in plain text
  • Authentication tokens — for maintaining your session

Monitoring Data

  • URLs you monitor — the web addresses you add to your dashboard
  • Page content snapshots — temporary snapshots of monitored pages used for change detection. These are overwritten on each check.
  • Content hashes — cryptographic hashes used to detect changes without storing full page content long-term
  • Monitor settings — check intervals, notification preferences, custom labels

Notification Data

  • Notification history — record of alerts sent (type, timestamp, summary)
  • Change summaries — AI-generated descriptions of detected changes

Usage Data

  • Check history — timestamps and outcomes of monitoring checks
  • Contact form submissions — name, email, subject, and message when you contact us

3. How We Use Your Data

  • Service delivery — monitoring your URLs and sending notifications
  • AI analysis — page content is sent to our AI provider (OpenRouter) to generate change summaries. Content is processed ephemerally and not stored by the AI provider.
  • Communication — service notifications, security alerts, and product updates
  • Service improvement — understanding usage patterns to improve the product
  • Support — responding to your inquiries and resolving issues

4. Data Storage and Security

Your data is stored on Supabase infrastructure in the US-West-2 (Oregon) region. We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest for database storage
  • Secure password hashing (bcrypt)
  • Row-level security policies in our database
  • Regular security reviews and updates

5. Third-Party Services

We use the following third-party services that may process your data:

  • Supabase — database hosting and authentication (US-West-2)
  • Resend — transactional email delivery
  • OpenRouter — AI-powered change analysis (content processed ephemerally)
  • Vercel — application hosting
  • Stripe — payment processing (when applicable)

Each third-party service has their own privacy policy and data handling practices. We only share the minimum data necessary for each service to function.

6. Data Retention

  • Account data — retained while your account is active, deleted upon account deletion
  • Monitor data — retained while the monitor exists, deleted when monitor is removed
  • Page snapshots — overwritten on each check, only the latest snapshot is stored
  • Notification history — retained for 12 months, then automatically purged
  • Check history — retained for 30 days, then automatically purged
  • Contact submissions — retained for 24 months

7. Your Rights

You have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Portability — receive your data in a machine-readable format
  • Objection — object to certain data processing
  • Restriction — request limited processing of your data

To exercise these rights, contact us at support@notifybee.com or through our contact page. We will respond within 30 days.

8. Cookies and Tracking

NotifyBee uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking pixels. No data is sold to advertisers or data brokers.

9. Children's Privacy

NotifyBee is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

For privacy-related questions or requests, contact us at: