Privacy Policy

Thank you for using Chill SSL ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your personal and non-personal information when you use our website at https://www.chillssl.com (the "Website") and the Chill SSL monitoring platform (the "Service").

By accessing or using the Website or Service, you agree to the practices described in this Privacy Policy. If you do not agree, please don't use the Website or our application.

1. Information We Collect

1.1 Personal Data

We may collect the following personal information from you:

Name: to personalize your experience and communicate with you.
Email address: to create your account, send important updates, alerts, and communication.
Payment information: collected securely via our payment processor (e.g. Stripe) to manage subscriptions and billing.
Login credentials and authentication data: managed through our identity provider (e.g. Clerk) to secure your access to the Service.
Monitored endpoints (domains, IPs, certificates): the data you add to Chill SSL for monitoring.

1.2 Non-Personal Data

We may collect non-personal data, including:

IP address, browser type, device information, and operating system.
Log data such as login times, scan requests, and error reports.
Cookies and analytics data (e.g., Google Analytics, error tracking) to improve functionality and performance.

2. Purpose of Data Collection

We collect and use data to:

Provide SSL/TLS monitoring and alerting functionality.
Process payments and manage subscriptions.
Send system alerts, renewal reminders, and updates about the Service.
Improve and secure the Website and Service through analytics.
Provide customer support.

3. Data Sharing

We do not sell your data. However, if Chill SSL is sold, merged, or acquired, you can expect that any data we maintain will be transferred to the new owners and used in accordance with this Privacy Policy.

We may share information only as necessary to provide the Service:

Payment processing: with Stripe or similar providers.
Authentication and account management: with Clerk or similar providers.
Hosting and infrastructure: with Supabase, Vercel, and other service providers we use.
Legal compliance: if required by law, regulation, or legal process.

4. Data Retention

We retain your data for as long as your account is active.
We may also retain data indefinitely for the purposes of account restoration should you wish to renew your account, unless you specifically request deletion.
SSL/TLS certificate scan results may be stored for operational and historical purposes.

5. Security

We implement commercially reasonable safeguards to protect your personal information, including encryption, secure transmission protocols, and access controls. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Children's Privacy

Chill SSL is a professional service and is not intended for use by children under 16. We do not knowingly collect data from children.

7. Your Rights

Depending on your jurisdiction (e.g., GDPR in the EU/EEA):

You may request access to, correction of, or deletion of your personal data.
You may request data portability or restrict certain processing.
You can withdraw consent to receive non-essential communications at any time.

Requests can be sent to [email protected].

8. Updates to this Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new "Last updated" date. Continued use of the Service after updates constitutes acceptance of the revised Policy.

9. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:
Email: [email protected]

By using Chill SSL, you consent to this Privacy Policy.