Privacy Policy

G Networks ("Company", "we", "us", or "our") operates the Glowo uptime monitoring platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

The data controller is G Networks, registered in France under SIREN 753 647 585, located at 100 rue Vulfran Warme, 80000 Amiens, France. For privacy inquiries, use our contact page and select "Privacy".

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, and password when you create an account
• Billing information: payment details processed securely through Stripe (we do not store your full card details)
• Monitor configuration: URLs, hostnames, IP addresses, and endpoints you configure for monitoring
• Notification settings: email addresses, webhook URLs, and messaging service integrations
• Support communications: information you provide when contacting us for support

2.2 Information Collected Automatically

• Monitoring data: response times, HTTP status codes, SSL certificate details, and availability metrics for your configured monitors
• Usage data: features used, pages visited, and interactions within the dashboard
• Device and browser information: IP address, browser type, operating system, and device identifiers
• Session data: login timestamps, session duration, and authentication events

3. Legal Basis for Processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)) — to provide and operate the Service, manage your account, and deliver the features you use
• Legitimate interests (Art. 6(1)(f)) — to improve the Service, detect and prevent abuse, and maintain audit logs
• Legal obligation (Art. 6(1)(c)) — to comply with applicable laws and legal requests

4. How We Use Your Information

• Provide, operate, and maintain the monitoring Service
• Process uptime checks and deliver monitoring alerts
• Display status page information to your designated audiences
• Process payments and manage subscriptions
• Send service notifications (downtime alerts, certificate expiry, etc.)
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve the Service
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers: third-party services that help us operate (e.g., Stripe for payments, email delivery providers, infrastructure providers)
• Status page visitors: monitoring data you choose to display publicly on your status pages
• Legal compliance: when required by law, legal process, or to protect our rights
• Business transfers: in connection with a merger, acquisition, or sale of assets

6. Data Hosting and Transfers

Your account data and monitoring data are stored and processed on infrastructure located in the European Union. Uptime checks are executed from a globally distributed checker fleet to ensure accurate measurements; only check results (response times, status codes) leave the check region, and they are immediately routed back to EU storage. We do not transfer your personal data outside the European Economic Area for storage.

7. Data Retention

• Monitoring data (heartbeats, response times): retained according to your plan's retention period (30 days for Free, 90 days for Pro, 365 days for Business)
• Account information: retained while your account is active and for a reasonable period after deletion for legal and operational purposes
• Billing records: retained as required by applicable tax and accounting laws (typically 10 years in France)
• Audit logs: retained for security and compliance purposes (typically 7 years)

8. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS 1.3) and at rest
• Secure authentication with support for two-factor authentication and passkeys
• Regular security audits and vulnerability assessments
• Access controls and principle of least privilege for internal systems
• Hashed passwords using industry-standard algorithms

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights (GDPR Art. 15-22)

Under the GDPR and French data protection law, you have the right to:

• Access (Art. 15) — obtain a copy of your personal data
• Rectification (Art. 16) — correct inaccurate or incomplete data
• Erasure (Art. 17) — request deletion of your account and data
• Data portability (Art. 20) — export your data in a structured, machine-readable format
• Restriction (Art. 18) — restrict processing in certain circumstances
• Objection (Art. 21) — object to processing based on legitimate interests

To exercise these rights, use our contact page and select "Privacy". We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

10. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. See our Cookie Policy for details.

11. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or our data practices, please use our contact page and select "Privacy".