Privacy Policy

Scope and contact

This policy applies to NorthDuty websites, the NorthDuty application, and related website monitoring services. It covers information submitted by account owners, workspace members, invited users, and people who contact NorthDuty.

NorthDuty is operated by LUMENSOFT S.R.L., a company registered in the Republic of Moldova, and can be reached at support@northduty.com for privacy questions, account requests, data handling questions, or requests related to this policy.

Information NorthDuty collects

NorthDuty may collect account information such as name, email address, password credentials, workspace membership, invitation status, selected plan information, support messages, and service communications. NorthDuty does not require payment information to use the free plan; payment details are collected only when a paid plan is selected.

NorthDuty also processes monitoring configuration and results, including project names, monitored URLs, schedules, alert rules, notification destinations, website health results, response times, HTTP status data, SSL and DNS signals, JavaScript errors, failed resources, API call metadata, screenshots, visual comparison data, user journey definitions, run results, repair notes, and generated reports.

NorthDuty may collect product usage data, logs, device and browser information, IP address, approximate location derived from IP address, pages visited, feature interactions, and diagnostic events needed to operate, secure, and improve the service. NorthDuty does not currently use separate analytics or marketing tracking tools.

How NorthDuty uses information

NorthDuty uses information to create and manage accounts, operate website monitoring checks, run screenshots and visual diffs, execute configured user journeys, publish results, send alerts, generate reports, provide support, troubleshoot issues, prevent abuse, maintain security, improve product reliability, and communicate about service changes.

NorthDuty may use monitored website data to provide the monitoring features requested by customers. Customers should configure NorthDuty only with websites, URLs, user journeys, and alert destinations they are authorized to monitor or use.

NorthDuty may use aggregated or de-identified information to understand product performance, improve monitoring quality, plan features, and explain service trends without identifying a specific customer or monitored website.

Sharing and service providers

NorthDuty does not sell customer account data or monitored website data. NorthDuty uses Amazon Web Services for hosting and infrastructure, including EC2 for application hosting, AWS services for database and storage, and Amazon S3 for screenshot and object storage.

NorthDuty uses Anthropic for AI-assisted user-flow suggestion, repair, and related user-flow automation features. When those features are used, relevant prompts, monitored site context, flow steps, run details, error output, and other information needed to produce or repair a flow may be sent to Anthropic.

NorthDuty may also share information with service providers that help operate the product, such as email, customer support, security, and monitoring providers. Payments for paid plans are collected and processed by Paddle.com Market Ltd ("Paddle"), which acts as merchant of record for paid orders. Payment card details are submitted directly to Paddle and are handled under Paddle's own terms and privacy policy; NorthDuty does not store full payment card numbers.

NorthDuty may disclose information when required by law, to protect NorthDuty, customers, users, or the public, to investigate abuse or security incidents, to enforce agreements, or as part of a merger, acquisition, financing, reorganization, or sale of assets.

Customers control who they invite to a workspace and which notification destinations receive monitoring alerts. Information sent to customer-configured destinations is handled according to the customer's configuration and the destination provider's terms.

Cookies and analytics

NorthDuty may use cookies, local storage, and similar technologies to keep users signed in, remember preferences, secure sessions, understand product usage, and improve the service.

NorthDuty does not currently use separate analytics or marketing tools. If NorthDuty adds analytics or marketing tools later, this policy should be updated to describe those tools and any related choices.

Browser settings may allow users to block or delete cookies. Some account, authentication, analytics, or security features may not work correctly if required cookies or storage are disabled.

Retention and deletion

NorthDuty keeps screenshots, reports, user-flow run history, monitoring run history, and operational logs for up to 3 months unless a shorter period is configured, deletion is requested and completed earlier, or longer retention is required for security, legal, billing, abuse prevention, backup, or dispute-resolution reasons.

Customers may request account or workspace deletion by contacting support@northduty.com. Some information may remain in backups, logs, billing records, security records, or legal records for a limited period where retention is necessary.

Security

NorthDuty uses reasonable technical and organizational safeguards designed to protect account and monitoring data. No internet service can guarantee absolute security, so customers should use strong passwords, protect account credentials, limit workspace access, and review alert destinations.

Customers should avoid placing unnecessary secrets, sensitive personal data, payment details, protected health information, or other high-risk data into project names, journey steps, URLs, alerts, reports, or monitored content unless they have determined that doing so is appropriate for their own compliance needs.

User choices and rights

Depending on location, users may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information. NorthDuty will respond to applicable requests sent to support@northduty.com as required by law.

Workspace owners may be responsible for responding to requests involving data they configured or uploaded into NorthDuty. NorthDuty may need to verify identity or authority before completing a request.

International use and children

NorthDuty is operated by LUMENSOFT S.R.L., registered in the Republic of Moldova, and uses service providers that may process information in other countries, including Amazon Web Services and Anthropic. By using NorthDuty, users understand that information may be transferred to and processed in locations outside their country of residence.

NorthDuty is not intended for children under 13 and should not be used by children. If you believe a child provided personal information to NorthDuty, contact support@northduty.com.

Changes to this policy

NorthDuty may update this Privacy Policy from time to time. When changes are material, NorthDuty may provide notice through the website, the app, email, or another reasonable channel. Continued use of the service after an update means the updated policy applies.