Operator
QuietDiff is operated by Kendall Sorenson, a sole proprietor.
1. Information We Collect
Account Information
- Email address (required for account creation and alerts)
- Name (optional)
- Payment information (processed by Stripe, not stored on our servers)
Monitor Configuration
- URLs you choose to monitor
- CSS selectors and field descriptions
- Check intervals and alert preferences
- Notification channels (email, webhook URLs, Slack webhooks)
Snapshot Data
- HTML content and extracted field values from monitored pages
- Screenshots of monitored pages (when headless browser is used)
- Check logs (timestamps, status codes, durations, errors)
- Retention period: 7 days to 2 years depending on your plan
Usage Data
- API requests and MCP tool calls
- Check execution metrics (fetcher tier, duration, cost)
- Error logs and debugging information
Automatically Collected Information
- IP addresses (for authentication and abuse prevention)
- Browser type and device information (via standard HTTP headers)
- Service usage analytics
2. How We Use Your Information
- Provide and operate the monitoring service
- Send change alerts via your configured channels
- Process payments and manage subscriptions
- Send service-related notifications (quota warnings, renewal reminders)
- Detect and prevent abuse, fraud, and security threats
- Improve service performance and features
- Respond to support requests
- Comply with legal obligations
3. Data Sharing and Disclosure
We do not sell or rent your personal information. We share data only in limited circumstances:
Service Providers
- Stripe: Payment processing (see Stripe Privacy Policy)
- Resend: Email delivery (see Resend Privacy Policy)
- Vercel: Infrastructure hosting (see Vercel Privacy Policy)
- Neon Database: PostgreSQL database hosting
- Vercel: Application hosting and infrastructure
- Stripe: Payment processing
- Resend: Transactional email delivery
- OpenAI (or configured AI provider): AI significance filtering (monitored webpage content is sent for analysis)
- Sentry (if enabled): Error monitoring
Webhooks You Configure
When you configure webhook alerts, we send change data to your specified URLs. You are responsible for the security and privacy practices of those endpoints.
Legal Requirements
We may disclose information if required by law, subpoena, or to protect our rights, prevent fraud, or respond to abuse reports.
4. Data Security
- All data transmitted over HTTPS
- Database encryption at rest
- Access controls and authentication for all admin operations
- API keys and webhook secrets stored with encryption
- Regular security audits and updates
- No plaintext storage of payment information (handled by Stripe)
5. Your Rights
You have the right to:
- Access: Request a copy of your data via support@quietdiff.com
- Correction: Update your account information in settings
- Deletion: Delete your account and all associated data (permanent within 30 days)
- Export: Download your monitor configurations and change history
- Opt-Out: Unsubscribe from marketing emails (service emails still sent)
- Portability: Export data in JSON format via API
For GDPR, CCPA, or other privacy law requests, contact privacy@quietdiff.com
6. Data Retention
- Active Accounts: Data retained per your plan tier (7 days to 2 years)
- Deleted Accounts: All data permanently deleted within 30 days
- Billing Records: Retained for 7 years for tax/legal compliance
- Logs: Rotated after 90 days (unless investigating abuse/security)
7. Cookies and Tracking
We use minimal cookies:
- Authentication: Session cookies to keep you logged in
- Analytics: Anonymous usage statistics (opt-out available)
- No third-party advertising cookies
- No cross-site tracking
8. International Data Transfers
Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required by law.
9. Children's Privacy
QuietDiff is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately.
10. Data Processing Addendum (DPA)
Snapshots of monitored websites may contain personal data of third parties. When using QuietDiff to process personal data, you act as the data controller and QuietDiff acts as the data processor. A Data Processing Addendum is available upon request for customers subject to GDPR or similar regulations.
Request a DPA: legal@quietdiff.com
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email at least 30 days in advance. Continued use after changes indicates acceptance.
12. Contact Us
For privacy-related questions or to exercise your rights: