Privacy Policy

1. Who we are

UpmarketHQ operates Santati at santati.io. You can reach us at support@santati.io. For Customer Content, we process data on behalf of the customer who sent it.

2. Account data we collect

• Your email address, name and password (stored hashed), and an optional profile photo.
• Your language and timezone preferences, team memberships and roles, and invitations (including the invitee's email address).
• API key names, prefixes, scopes and last-used time, and your two-factor settings.
• If your team uses single sign-on, the identifier and email address your identity provider sends.
• Billing is handled by Stripe. We store Stripe customer and subscription identifiers, not card numbers.
• If you have no profile photo, your avatar is loaded from Gravatar using a hash of your email address.

3. Customer Content

Customer Content is the audit events your systems send to Santati, including actors, targets, metadata and context, which can contain your end users' personal data. We use it only to provide the service. It is kept for the retention you configure, can be redacted on ingest with redaction rules, can be exported through the API, and is deleted with the team.

4. How we use data

We use data to provide and secure the service, bill you, answer support requests, and send service emails (sign-in, invitations and log stream failure alerts). We do not sell personal data or use it for advertising.

5. Service providers

• Fly.io: hosting, in the United States.
• Stripe: payments.
• Cloudflare Turnstile: bot protection on signup.
• Sentry: error monitoring.
• Google Analytics: site analytics.
• PostHog: product analytics and pricing experiments.
• Google Fonts: web fonts.
• Gravatar: default avatars.
• Our email delivery provider: service emails.

6. Cookies

• _santati_control_key keeps you signed in.
• theme stores light or dark mode.

Third parties may set cookies on Stripe checkout pages, on the signup bot check, and through Google Analytics where it is enabled.

7. Retention

Account data is kept while your account is active. Billing records are kept as long as the law requires.

8. Your choices

You can view and edit your profile at any time. Team admins can delete a team and all its data from team settings. To delete your user account or get a copy of your account data, email us.

9. Where data is stored

We store data in the United States.

10. Children

The service is not directed to children under 16.

11. Changes

We update the date above when this policy changes, and we email account owners about material changes.

12. Contact

Questions about this policy: support@santati.io.