Privacy policy
TODO(legal review): this is a template written by the engineering team. Have it reviewed by counsel before launch and fill in the company details and governing law.
Last updated: 2026-09-16. This policy describes what PathIntact ("we") collects when you use PathIntact and why.
What we collect
- Account data: your email address, name, password hash or OAuth identifier, organization name and membership roles.
- Site data: the URLs of documentation sites you ask us to monitor, and the crawl results: page URLs, titles, meta tags, link targets, HTTP statuses, element ids and a hash of page text. We do not store page bodies.
- Alert configuration: email recipients and, encrypted at rest, Slack webhook URLs and webhook signing secrets.
- Billing data: handled by Stripe. We store your Stripe customer and subscription identifiers, not card details.
- Free tool runs: the URLs you submit and the results, kept for 7 days, together with a salted hash of your IP address used for rate limiting.
- Analytics: if enabled, privacy-friendly page analytics via Plausible, which does not use cookies or collect personal data.
- Logs: request logs with request IDs for debugging, retained briefly.
How we use it
To crawl the sites you configured, send the alerts you asked for, bill your subscription, prevent abuse of the free tools and improve the product. We do not sell personal data and do not use crawl data for advertising.
Crawling third-party sites
Our crawler only visits sites that a customer asked us to monitor and pages linked from them, and follows the rules described on the bot page. Site owners can block it with robots.txt.
Sub-processors
Hosting provider (TODO(legal review): name), Stripe (payments), Resend (transactional email), Cloudflare (bot protection on free tools), Plausible (analytics, optional).
Retention and deletion
Crawl link data is kept for the history window of your plan (14 days to 1 year); issues and page records are kept while the site exists. Deleting a site or an organization removes its data. Email us to delete your account entirely.
Your rights
You can access, correct, export or delete your data by using the dashboard or emailing [email protected]. TODO(legal review): add GDPR/CCPA specifics and a data processing agreement link.