Privacy Policy

Who We Are

LogStead is a product of Elite Tech Global, LLC. When we say “LogStead,” “we,” or “us” in this policy, we mean Elite Tech Global, LLC and the LogStead service available at logstead.app.

What We Collect

Account information: When you sign up, we collect your full name, email address, and a password. If you are invited to join an existing organization, we collect your name and email only.

Organization and establishment data: You provide your company name, industry type, NAICS code, number of employees, total hours worked, and physical establishment addresses. This information is required for OSHA 300 log compliance.

Incident records: When you log workplace incidents, we store details such as employee names, job titles, dates, injury descriptions, treatment information, and days away or restricted. This is the core data your OSHA Forms 300, 300A, and 301 are generated from.

Payment information: Payment processing is handled entirely by Lemon Squeezy. We do not store your credit card number, billing address, or other payment details on our servers. We receive a subscription ID and plan status from Lemon Squeezy to manage your account.

Usage data: We collect basic analytics through Vercel Analytics, including page views, device type, and browser. This data is aggregated and not tied to your identity.

How We Use Your Data

We use your data to operate the LogStead service: generating OSHA forms, calculating DART and TRIR rates, sending deadline reminders, processing team invitations, and providing PDF and CSV exports. We also use your email to send transactional notifications such as incident alerts, trial expiration reminders, and team invites.

We do not sell, rent, or share your personal data or incident records with third parties for marketing purposes. We will never use your workplace incident data for advertising.

Service Providers

We use the following third-party services to operate LogStead:

Supabase hosts our database and handles authentication. Your data is stored in a PostgreSQL database with row-level security policies that isolate each organization's data. Vercel hosts our application and provides analytics. Lemon Squeezy processes subscription payments. Resend delivers transactional emails such as team invitations and deadline reminders. Sentry captures error reports to help us fix bugs, and may include technical context such as browser type and URL but not incident content.

Data Security

All data transmitted between your browser and LogStead is encrypted using TLS (HTTPS). Our database enforces row-level security (RLS) policies so that each organization can only access its own data. Authentication tokens are managed by Supabase Auth and stored in secure, HTTP-only cookies.

Data Retention

OSHA requires employers to retain injury and illness records for five years following the year they cover. We store your data for at least this period. If you delete your account, we will remove your personal information within 30 days, but we may retain anonymized or aggregated data that cannot identify you.

Your Rights

You can access, update, or delete your account data at any time through the Settings page. If you want to request a full export of your data or have your account permanently deleted, email us at the address below and we will process your request within 30 days.

Cookies

LogStead uses strictly necessary cookies for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party marketing cookies. Vercel Analytics collects aggregated usage data without setting cookies on your browser.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice within the application. Your continued use of LogStead after changes take effect constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, email us at support@logstead.app.