Privacy Policy

What We Collect

When you create a LogStitch account we collect your email address and, if you sign in with Google, your name and profile picture. When you use our API we process the audit log event data you send us, which may include identifiers such as user IDs, IP addresses, and action descriptions as defined by your integration.

How We Use It

We use your information to operate and improve LogStitch, authenticate your account, process and store audit log events on behalf of your organization, enforce usage limits, and communicate service updates. We do not sell your data to third parties.

Third-Party Services

We rely on the following third-party providers to deliver our service:

• Supabase — database hosting and authentication
• Vercel — application hosting and edge delivery
• Stripe — payment processing (if you upgrade to a paid plan)

Each provider processes data in accordance with their own privacy policies. We only share the minimum data required for each service to function.

Data Retention

Audit log events on the free tier are retained for 7 days. Paid plans offer configurable retention periods. Account data is retained for as long as your account is active. When you delete your account we remove your personal data within 30 days.

Cookies

We use essential cookies to maintain your authentication session. We do not use third-party tracking cookies or advertising pixels.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. If you are located in the EU/EEA, you have additional rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

Contact

If you have questions about this privacy policy, contact us at privacy@logstitch.io.