Privacy notice

Founder Martin Müller operates AppAlert from Switzerland during Early Access. Martin handles privacy questions and data requests directly.

When you create an account and connect an organization, AppAlert stores your name, email address, linked organization, and membership. It also stores the Microsoft Entra metadata needed for the expiry queue, including owner email addresses. Notification recipients, settings, and delivery records support email alerts and their audit history.

AppAlert never stores raw secret values, certificate private keys, Microsoft account passwords, or mailbox contents. The data handling page lists the stored fields and the data AppAlert never receives.

AppAlert uses cookieless Vercel Web Analytics for aggregate page views and six defined product events. AppAlert does not send names, email addresses, organization names, or Microsoft identifiers as analytics properties.

Vercel records anonymous data points such as the page path, referrer, approximate location, browser, device type, and event time. Vercel states that these data points are not associated with an individual, customer, or IP address. AppAlert does not load Google Analytics, advertising pixels, or cross-site marketing cookies.

Read Vercel's Web Analytics privacy documentation.

• Authenticate users and keep each account linked to its organization.
• Synchronize credential metadata, prioritize the expiry queue, route alerts, and keep notification evidence.
• Operate, secure, troubleshoot, and improve the service.
• Respond to questions and deletion requests.

During Early Access, the founder may email the address on your AppAlert account to ask about your experience and what the service should improve. These messages support product research. They are not an automated marketing campaign. You can stop further feedback requests by replying to the message.

AppAlert uses Microsoft for sign-in and directory reads, Vercel for hosting and public-site analytics, Neon for the application database, and Resend for email delivery. AppAlert does not sell personal data.

Application compute and the primary database run in Frankfurt. Resend stores email content and delivery logs in the United States. Its Data Processing Addendum includes transfer terms for protected European and Swiss data. See the data location page for the current provider details.

AppAlert keeps product inventory and configuration while your organization uses the service or until deletion is requested. Notification history and Organization Settings history have a 365-day retention window. Provider backups expire under each provider's policy.

Organization deletion is handled manually during Early Access. The retention and revocation page explains what deletion removes and how to revoke Microsoft consent separately.

You may ask to access, correct, export, or delete personal data associated with your AppAlert account. Reply to your Early Access invitation or to a personal service email from the founder. Do not include personal data in a public GitHub issue.