Privacy Policy

Who We Are

LogStead is a product of Elite Tech Global, LLC. When we say “LogStead,” “we,” or “us” in this policy, we mean Elite Tech Global, LLC and the LogStead service available at logstead.app.

Two Kinds of Data, Two Different Roles

LogStead handles two categories of information, and our role differs for each.

Your account data. Information about you and your organization — your name, email, company details, and billing status. For this data we act as the business deciding how it is used, and this policy governs it directly.

Workplace incident records you enter. The injury and illness details you log — including information about your employees — are data your organization owns and controls. You (the employer) decide what to collect and are responsible for having the authority and lawful basis to enter it. LogStead stores and processes that information on your behalf to generate your OSHA records; we do not use it for our own purposes. If an employee has a question about how their injury information is handled, that is a matter for their employer, who is the party responsible for those records.

What We Collect

Account information: When you sign up, we collect your full name, email address, and a password. If you are invited to join an existing organization, we collect your name and email only.

Organization and establishment data: You provide your company name, industry type, NAICS code, number of employees, total hours worked, and physical establishment addresses. This information is required for OSHA 300 log compliance.

Incident records: When you log workplace incidents, we store details such as employee names, job titles, dates, injury descriptions, treatment information, and days away or restricted. This is the core data your OSHA Forms 300, 300A, and 301 are generated from.

Payment information: Payment processing is handled entirely by Lemon Squeezy. We do not store your credit card number, billing address, or other payment details on our servers. We receive a subscription ID and plan status from Lemon Squeezy to manage your account.

Usage data: We collect basic analytics through Vercel Analytics and PostHog, including page views, device type, and browser, to understand how visitors use our site and improve it. We do not record your screen or sessions, and we do not tie this analytics data to your identity.

How We Use Your Data

We use your data to operate the LogStead service: generating OSHA forms, calculating DART and TRIR rates, sending deadline reminders, processing team invitations, and providing PDF and CSV exports. We also use your email to send transactional notifications such as incident alerts, trial expiration reminders, and team invites.

We do not sell, rent, or share your personal data or incident records with third parties for marketing purposes. We will never use your workplace incident data for advertising.

Service Providers

We use the following third-party services to operate LogStead:

Supabase hosts our database and handles authentication. Your data is stored in a PostgreSQL database with row-level security policies that isolate each organization's data. Vercel hosts our application and provides analytics. PostHog provides product analytics on how our site and app are used; it does not receive your workplace incident content. Lemon Squeezy processes subscription payments. Resend delivers transactional emails such as team invitations and deadline reminders. Sentry captures error reports to help us fix bugs, and may include technical context such as browser type and URL but not incident content.

Data Security

All data transmitted between your browser and LogStead is encrypted using TLS (HTTPS). Our database enforces row-level security (RLS) policies so that each organization can only access its own data. Authentication tokens are managed by Supabase Auth and stored in secure, HTTP-only cookies.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected customers and any regulators as required by applicable law.

Where Your Data Is Stored

LogStead and its infrastructure providers store and process data in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed there.

When We Disclose Data

We do not sell your personal data or incident records. We may disclose information when required to do so by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud. If LogStead is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction; we will notify you and honor the commitments in this policy.

Data Retention

OSHA requires employers to retain injury and illness records for five years following the year they cover. We store your data for at least this period. If you delete your account, we will remove your personal information within 30 days, but we may retain anonymized or aggregated data that cannot identify you.

Your Rights

You can access, update, or delete your account data at any time through the Settings page. If you want to request a full export of your data or have your account permanently deleted, email us at the address below and we will process your request within 30 days.

Cookies

LogStead uses strictly necessary cookies for authentication and session management. We do not use advertising cookies or third-party marketing cookies, and we do not track you across other websites. Vercel Analytics collects aggregated usage data without setting cookies. Our product analytics (PostHog) does not set cookies either; it stores an anonymous identifier in your browser's local storage so we can understand usage patterns, and it is configured with session recording and automatic event capture turned off.

Your State Privacy Rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to know how it is used. We honor these requests regardless of your state of residence — email us at the address below and we will respond within the timeframe required by law. Where laws such as the California Consumer Privacy Act apply, LogStead acts as a service provider for the workplace incident records our customers enter, and we do not sell or share personal information or use it for cross-context behavioral advertising. We will not discriminate against you for exercising any of these rights.

Children's Privacy

LogStead is a business tool intended for employers and is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice within the application. Your continued use of LogStead after changes take effect constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, email us at support@logstead.app, or write to us at the address below.

Elite Tech Global, LLC
7533 S Center View Ct # 5188
West Jordan, Utah 84084
United States