Privacy statement
What we hold about you, the customer, and about the people using your applications. Two different things, and this page keeps them apart.
About you, our customer
When you sign up we hold your name, your email address, your organisation domain, and whatever billing details you give us: company name, address, VAT number, and the identifiers our payment provider issues. We hold this to run your account, to charge you, and to meet our own legal obligations around invoicing.
The legal basis is the contract between us, and for invoicing, a legal obligation. Invoicing records are kept for as long as Belgian accounting law requires, which is seven years. Account data is deleted when the organisation is.
About the people using your applications
This is the data your applications send: stack traces, request context, log lines, breadcrumbs, and whatever user identifier you chose to attach. For this data you are the controller and we are the processor. We act on your instruction, we do not decide what it contains, and we do not use it for our own purposes.
The data processing agreement is the document that governs it, and it is published on this site rather than produced on request.
This website
The public pages set no tracking cookies and load no third party scripts or fonts. There is no analytics product behind them; we read server logs, which record a request, a timestamp and a truncated address, and are kept for fourteen days.
Once you sign in, a session cookie is set because you cannot stay signed in without one. Your language preference is stored the same way. Neither is used for anything else.
Who else sees anything
The sub-processors listed on this site, and nobody else. All but one are in the European Union. The exception is Cloudflare, a United States company that carries every request to this site and to the product on its way in; it is used for transport only, and storage stays with the processors in the EU. Alert delivery to Slack or Microsoft Teams leaves the EU by definition and only happens if you configure a rule that sends there.
Your rights
Access, rectification, erasure, restriction, portability and objection, as the GDPR provides. Write to the privacy address on the contact page and we will answer within a month, usually much sooner.
If you are not satisfied you may complain to the Belgian Data Protection Authority, or to the supervisory authority where you live.
Fourteen days of Team, without a card.
Sign up with your work address, prove your domain with one DNS record, and paste a DSN. The first stack trace usually arrives before the coffee does.
No card. The trial ends by itself and drops to Free; nothing is charged unless you choose a plan.
