Privacy Policy
Last Updated: September 11, 2026
StatusBird LLC ("we," "us," or "our") operates the statusbird.io website and the StatusBird Shopify app (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
In short: we collect user data to run the Service. That means your account details (email, name, and phone number if you turn on SMS alerts), the store URLs and services you ask us to monitor, your notification settings, your billing status, and technical usage data such as IP address and browser type.
We use artificial intelligence (AI) to write incident summaries and readiness reports, described in section 3. We share data only with the service providers listed in section 4, and we do not sell it.
You can export or delete your data at any time (section 7). The Service has no file uploads, so there is no uploaded content to keep or delete.
1. Information We Collect
We collect several different types of information for various purposes to provide and improve our Service to you.
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information, including:
- Email Address: Used for account login, password resets, and critical service alerts.
- Phone Number: Used strictly for sending SMS alerts when your monitored website goes down or comes back up.
- Name: Optional, used to address you in the product and in emails.
- Monitoring configuration: The third-party services you choose to monitor, the public URL of your own storefront if you add store monitoring, your alert thresholds, quiet hours and timezone, and any Slack, Microsoft Teams or Discord webhook URLs you enter. Webhook URLs are treated as secrets.
- Shopify connection: If you install StatusBird from the Shopify App Store, your shop domain and the API access token Shopify issues to us, used only to read your shop's status and manage billing through Shopify.
- Feedback: Ratings and messages you send us.
- Cookies and Usage Data: A session cookie keeps you logged in. Our servers and hosting provider record standard request logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting.
- No uploads: The Service does not accept file uploads, so we hold no uploaded documents or images from you.
Payment Data
Payments are processed through Stripe (for direct signups) or the Shopify Billing API (for Shopify App Store installs). We do not store or process your credit card information directly.
2. How We Use Your Data
StatusBird LLC uses the collected data for various purposes:
- To provide and maintain the Service (checking your URLs).
- To notify you about changes to our Service.
- To provide customer support.
- To monitor the usage of the Service so we can detect and fix technical issues.
- To send you alerts via email or SMS (only if you have enabled them).
3. Automated Processing and Artificial Intelligence
Parts of the Service are produced by AI models. Specifically, StatusBird uses Anthropic's Claude models through Anthropic's API to write plain-language incident summaries, to analyse whether several service incidents are related, and to generate readiness reports about your store. Our blog also publishes articles drafted by an AI model; those are written from public service data and contain no customer data.
What is sent to the AI provider for these features: the names of the services you monitor, incident statuses and timestamps, and, for a readiness report, the public URL of your store and what our own check of that page found. We do not send your email address, phone number, password, payment details, webhook URLs or Shopify access token to any AI provider. Under Anthropic's commercial API terms, inputs and outputs are not used to train their models.
AI output is informational. No decision with a legal or similarly significant effect on you (for example about your account, billing or access) is made solely by automated means.
4. Sharing Your Data (Third-Party Processors)
We do not sell your personal data and we do not share it for cross-context behavioural advertising. We share data only with the service providers below, each of which processes it on our behalf under its own terms and only to the extent necessary to run the Service:
- Render: Hosting for the application and its database (United States). Render also holds server request logs.
- SendGrid (Twilio): Delivery of every email we send, including alerts, digests and account messages. Your email address and the message content are shared for delivery.
- Twilio: Delivery of SMS alerts. Your phone number is shared with Twilio for the sole purpose of delivering these alerts.
- Stripe: Billing for direct signups, including the customer portal you use to change or cancel a subscription. Stripe holds your card details; we never see them.
- Shopify: Billing for Shopify App Store installs is handled through the Shopify Billing API.
- Anthropic: The AI provider for the features described in section 3.
- Plausible Analytics: Cookieless, privacy-focused page analytics hosted in the European Union. It collects no personal identifiers.
- Google: The Google Ads conversion tag, loaded solely after you accept cookies in the consent banner. Google also indexes our public pages as a search engine.
- LinkedIn: The LinkedIn Insight Tag for advertising measurement, loaded only after you accept cookies in the consent banner.
- Cloudflare: The Turnstile challenge on the signup form, which checks that a signup is not automated. Cloudflare receives your IP address and browser signals for that check.
- Sentry: Error monitoring for the application when enabled. Configured not to send personal data; a crash report may include the URL requested and a technical stack trace.
- Slack, Microsoft Teams, Discord: Only if you add an incoming webhook, we post alert messages to the URL you provided.
SMS Compliance (A2P 10DLC)
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
5. Data Retention
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. If you delete your account, we delete your personal data from our active databases at once; aggregate service status history contains no personal data and is kept. Server request logs are retained by our hosting provider for a short period for technical auditing and then discarded. Billing records are kept for as long as tax and accounting law requires.
You can also set your own retention window under Settings > Data retention: keep your data for 30, 90, 180 or 365 days, or indefinitely. A nightly job removes anything past that window. It covers the data that is yours, the checks we run against your storefronts and the log of alerts we sent you, and not our measurements of third-party services, which are our own record of what each vendor published, are shared across all accounts, and identify no customer.
6. Security of Data
The security of your data is important to us, but remember that no method of transmission over the Internet is 100% secure. We use commercially acceptable means (encryption, HTTPS, secure providers) to protect your Personal Data.
7. Your Data Rights
You have the right to:
- Access: Request a copy of the data we hold about you.
- Update: Correct any incomplete or inaccurate data.
- Delete: Request that we delete your account and all associated data.
- Opt-Out: You can opt out of SMS alerts at any time by replying STOP to any message or adjusting your settings in the dashboard.
8. GDPR: Rights of EU Residents
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data. You can do this directly from your account settings, or by emailing support@statusbird.io.
- Right to Restrict Processing: You can ask us to stop processing your data in certain circumstances.
- Right to Data Portability: You can request a copy of your data in a machine-readable format by emailing support@statusbird.io.
- Right to Object: You can object to processing of your personal data for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on consent (e.g., analytics cookies), you can withdraw consent at any time using the cookie preference banner on our site.
Our lawful basis for processing your personal data is contractual necessity (to provide the monitoring service you signed up for) and consent (for analytics cookies). To exercise any of your rights, contact us at support@statusbird.io. We will respond within 30 days.
9. Cookies
We use the following cookies:
- Session cookie: Required to keep you logged in. This is essential and does not require consent.
- Google Ads (AW-18124532460): Used to measure our advertising. Loaded only after you accept cookies via the consent banner; declining loads no tag. We do not show third-party ads on this site.
- LinkedIn Insight Tag: Advertising measurement, loaded only after you accept cookies via the consent banner.
- Plausible Analytics: Privacy-friendly, cookieless analytics. No personal data is collected and no consent is required.
You can change your cookie preferences at any time by clearing your browser's local storage or by contacting us.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us by email: support@statusbird.io