Privacy

BreakAlarm is a monitoring product for people who build with AI coding tools. This page says what we keep and why. It is not a substitute for advice from your own lawyer.

Account data

When you sign up we store your name, email, and a hash of your password. We also store the plan you are on and, if you pay, the Stripe customer id. We do not store your card number. Stripe does.

Mailing list

Sign-up and the free “check my app” form add your email to an ActiveCampaign list so we can send onboarding and product notes. If ActiveCampaign is down, we log the failure and still create the account or return the check. Every mailing we send should include a way to unsubscribe.

Checks and screenshots

You give us URLs and, optionally, selectors and values to type into forms. Those values can include a test password. Store a throwaway account, not your real one. When a check fails we may save a screenshot of the page in Vercel Blob, or on local disk during development. Screenshots can contain whatever the page rendered.

Stripe keys you paste

On the Pro plan you can paste a restricted Stripe key so we can read recent charges and events. We encrypt it before writing it to the database. We use it only to look for failed payments, undelivered webhooks, and the optional access check you configure. We do not create charges with it.

Free checks

The homepage check requires you to confirm you own the site or are allowed to test it. We store the URL, the email, the result, and a screenshot when one is captured. We refuse private network addresses so the form cannot be used to probe internal systems.

How long

Account data stays until you delete the account or ask us to. Check history stays with the app. Deleting an app deletes its checks, runs, and stored Stripe key.