Privacy Policy

Last updated: August 25, 2026

In short: We collect the minimum we need to run Driftwitness. Our analytics are cookieless, we never see your card details, and every marketing email we send has an unsubscribe link. Email [email protected] to exercise any data right.

1. Who we are

Driftwitness ("we", "us") is operated by Nisha Gupta, a sole proprietor based in India. For anything privacy-related — including a request for our postal contact details — reach us at [email protected].

This policy covers our website (driftwitness.com), our waitlist and newsletter, and the Driftwitness application.

2. What we collect, and why

Website visitors. Anonymous, aggregated usage statistics only (see Analytics below). We do not build visitor profiles.

Waitlist and newsletter subscribers. Your email address, which you give us yourself. We use double opt-in: you receive a confirmation email and are only subscribed after you click the confirmation link. We use the address only to send you the emails you signed up for.

Customers. Account details (name, email, agency name), the sites you add for monitoring, your settings, and support correspondence. We use these to provide the service, respond to you, and send service-related emails (such as billing and monitoring alerts).

Payment data. Payments are handled by Polar.sh, our Merchant of Record. We never see or store your card number. Polar.sh shares with us only what we need to manage your subscription (such as your plan and payment status), and handles your payment data under its own privacy policy.

3. Analytics — no cookies, no banner

We use Umami, a privacy-focused analytics tool that works without cookies and without tracking individual visitors across sites. It gives us aggregate numbers (page views, referrers, countries) — nothing tied to you as a person.

Because we set no analytics or advertising cookies, no cookie consent banner is needed on this site. The application may use strictly necessary cookies (such as a session cookie to keep you logged in); these require no consent under EU rules.

4. Forms and spam protection

We keep automated sign-ups off our lists with a hidden "honeypot" field and a double opt-in step — you must click a confirmation link we email you before you are added. We deliberately do not run a third-party CAPTCHA that profiles or tracks you, and we set no cookies for spam protection.

5. Email

• Waitlist and newsletter email is sent through EmailOctopus, our email service provider, which processes subscriber email addresses on our behalf.
• Every marketing email includes an unsubscribe link. Unsubscribing takes effect promptly and we don't email you again except for essential service messages (for example, a receipt or a security notice) if you are a customer.

6. Monitored website data

The Driftwitness product stores snapshots of the web pages our customers ask us to monitor, so we can show what changed and when.

• Monitored pages are public web pages chosen by our customers, who warrant they are authorized to monitor them (see our Terms of Service).
• Snapshots may incidentally contain personal data that appears on those public pages (for example, a name in a byline). We process this data on our customer's instruction, solely to provide change monitoring, and we do not use it for any other purpose.
• Snapshots are retained for 90 days, after which they are deleted or archived. When a customer removes a site or closes their account, associated snapshots are deleted within a reasonable period.
• If you believe a Driftwitness customer is monitoring your site without authority, email [email protected] and we will investigate.

7. Who we share data with

We do not sell personal data. We share it only with the processors and independent services we need to operate:

We may also disclose data if the law genuinely requires it.

8. International transfers

We operate from India, and our providers listed above may process data in other countries, including the United States and Cloudflare's global edge network. Where we transfer personal data of EU/UK residents, we rely on our providers' safeguards such as standard contractual clauses.

9. Legal bases (for EU/UK visitors)

Where GDPR or UK GDPR applies, we rely on:

• Contract — to provide the service you signed up for;
• Consent — for the waitlist and newsletter (that's what double opt-in captures; you can withdraw anytime via unsubscribe);
• Legitimate interests — for cookieless aggregate analytics, spam protection, and securing the service, none of which involve profiling you.

We have not appointed an EU or UK representative. You can exercise your rights directly with us at the contact below.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. EU/UK residents also have the right to complain to their local supervisory authority.

To exercise any of these rights, email [email protected]. We respond to every request and aim to do so within 30 days. We also honor applicable rights under Indian data protection law, including the Digital Personal Data Protection Act, 2023, as it comes into force.

11. Retention

• Waitlist/newsletter addresses: kept until you unsubscribe, then removed from active sending lists.
• Account data: kept while your account is active, then deleted or anonymized within a reasonable period after closure, except records we must keep for legal or accounting reasons.
• Page snapshots: 90 days, as described above.

12. Security

We use standard technical measures — encrypted connections (HTTPS), hashed credentials, access controls, and reputable infrastructure providers — to protect data. No system is perfectly secure; if a breach affects your personal data, we will notify you as required by law.

13. Children

Driftwitness is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.

14. Changes to this policy

If we change this policy materially, we will update the date above and, for significant changes affecting customers, notify you by email or in-app.

15. Contact

Privacy questions or requests: [email protected] Postal contact details are available on request by emailing the address above.