Privacy Policy

Last updated: February 8, 2026

All log processing happens in your infrastructure. Log10x never sees log content, only aggregated usage metrics.

Information We Collect

Account Information: Email address, name, company name, billing details. Collected when you register or subscribe.

Usage Metrics (Prometheus): Log10x products send anonymized Prometheus metrics to our management console including: event patterns (structural templates, no content), optional enrichments (geo country codes, HTTP status codes, severity levels, Kubernetes pod/namespace names), license verification, aggregate event counts and sizes. We never receive log message content, application data, or customer PII.

Website Analytics: When implemented, Google Analytics will track page views and session data with prior consent via cookie banner. You control whether analytics cookies are placed.

Authentication: Auth0 session cookies for login. These are strictly necessary cookies required for platform functionality.

Interactive Demo Chat: The AI demo chat on our website (such as the live demo on the homepage) records the messages you type and the assistant's replies, in order to operate and improve the demo. It runs against a public demo dataset, not your data. Please do not enter sensitive, confidential, or personal information. These demo conversation logs are retained only for a short period.

Zero Log Content Access Architecture

All Products Run in Your Infrastructure: Unlike traditional SaaS platforms, Log10x products process your logs entirely within your environment, and your log content never reaches Log10x. Where your log content travels beyond your own systems is determined by the destinations you configure, such as your log analyzer or object storage.

Edge products (the Reporter and the Receiver): deploy as DaemonSets or sidecars in your Kubernetes cluster, as an AWS Lambda extension, or as an Azure container. Process logs locally, in real time.

Cloud products (the Retriever): run in your own cloud account. Process data locally within your infrastructure.

What Log10x Receives: metrics only, and only when a deployment is licensed and configured with a Log10x endpoint. The shipped configuration names no endpoint, so an unconfigured deployment sends nothing at all. Where metrics are sent, they contain pattern templates, optional enrichment fields, and aggregate statistics. What Log10x Never Receives: Log message content, application data, customer PII, environment variables, secrets, or credentials.

How We Use Your Information

Service Delivery: Process compilations, generate cost reports, stream archived data. Provide the core platform functionality.

Billing & Payment: Process payments via Stripe and AWS Marketplace. Send invoices and payment notifications.

Product Improvement: Analyze usage patterns to enhance features and performance. All analysis uses aggregated, anonymized data.

Support: Respond to inquiries, troubleshoot issues, provide technical assistance. Access customer data only with explicit permission.

Legal Compliance: Meet legal obligations, enforce terms, protect our rights and your security.

Data Sharing & Subprocessors

No Data Selling: We never sell, rent, or trade your information. Period.

Service Providers: Limited sharing with subprocessors necessary to operate the platform. This list was last reviewed 7 September 2026; material changes are announced here.

Processing customer account and transaction data:
AWS - Infrastructure hosting, entitlement records and hosted metrics (US regions)
Auth0 (Okta) - Authentication and account identity
Stripe - Payment processing
AWS Marketplace - Alternative purchase path, entitlement and billing metadata
Google Workspace - Company email, including support correspondence

Processing website visitor data, loaded only after consent in the EU and UK:
Google Analytics 4 - Website analytics
Microsoft Clarity - Session analytics
PostHog - Product analytics
Calendly - Meeting scheduling, where you book a call

Legal Requirements: May disclose if required by law, subpoena, or to protect rights and safety.

Business Transfers: In event of merger/acquisition, data transfers only with equivalent privacy protections.

Data Retention & Deletion

Account Data: Retained while your account is active and for 30 days after cancellation (for potential recovery).

Prometheus Metrics: Usage metrics retained for 90 days by default. Configurable retention periods available.

Log Content: Log10x does NOT receive or retain your log content. All log processing occurs in your infrastructure. We never have access to your observability data.

Backups: Deleted account data purged from backups within 60 days.

Your Rights: Request data export, deletion, or correction anytime via privacy@log10x.com. We respond within 30 days.

Geographic Scope & Data Residency

Current Service Area: Log10x currently provides Services to customers located in the United States and other non-EEA jurisdictions. We do not currently offer Services to residents of the European Economic Area (EEA), United Kingdom, or Switzerland.

If Located in EEA/UK/Switzerland: Please do not use our Services or provide personal information to us. We plan to expand European availability in the future. For inquiries about European service availability, contact legal@log10x.com.

Data Processing Location: All Log10x products process data in your infrastructure (your geographic location). Our management console operates in US-based AWS regions. Given our zero-egress architecture, your log data never leaves your environment regardless of where our management console operates.

California Privacy Rights (CCPA/CPRA)

California Residents: Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the following rights:

Right to Know: Request categories and specific pieces of personal information we collect, use, disclose, or sell.

Right to Delete: Request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out: We do not sell personal information and have not done so in the past 12 months.

Right to Correct: Request correction of inaccurate personal information.

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Exercise Your Rights: Email privacy@log10x.com with subject "California Privacy Request." We respond within 45 days. For faster service, include your account email and specify which right you're exercising.

Changes & Contact

Policy Updates: We may update this privacy policy. Material changes announced 30 days in advance via email and website notice. Continued use constitutes acceptance.

Policy Version: Last updated December 15, 2024

Privacy Contact: privacy@log10x.com

General Contact: hello@log10x.com

Mailing Address: Log10x Inc., 190 Weston Rd Ste 1 Unit 1085, Weston, CT 06883

DPA/BAA Requests: Email legal@log10x.com with subject "DPA Request" or "BAA Request"

Questions About Privacy?

Need a Data Processing Agreement for compliance? Want to exercise your California privacy rights? Questions about our zero-egress architecture? Contact our privacy team directly.