Privacy Policy
Effective date: 2026-02-22
This Privacy Policy describes how LegacyLint processes personal data for the LegacyLint service.
1. Data Controller
- Service: LegacyLint
- Contact: support@legacylint.com
2. Data We Collect
- Account data: name, email address, tenant/account identifiers.
- Authentication/security data: login timestamps, IP address signals, MFA state, security event logs.
- Product usage data: project metadata, scan summaries, issue counts, rule configuration, billing state.
- Support/operations data: diagnostics, audit events, and communications with support.
3. Purpose of Processing
- Provide and secure the service.
- Authenticate users and enforce tenant isolation.
- Deliver billing, subscription, and support operations.
- Monitor reliability, detect abuse, and investigate incidents.
- Meet legal and contractual obligations.
4. Legal Bases
- Contract performance for delivering the service.
- Legitimate interests for security, fraud prevention, and service improvement.
- Legal obligation where required by law.
- Consent where specifically requested.
5. Data Retention
- Account and tenant data: retained while account is active.
- Security/audit logs: retained per operational and compliance requirements.
- Account deletion workflows: data is deactivated immediately; project records follow configured retention/purge windows.
6. Sharing and Subprocessors
- Data is shared only with processors required to operate the service (for example hosting, email, and payment processors).
- Subprocessors are bound by contractual confidentiality and security obligations.
7. International Transfers
- Where data is transferred internationally, appropriate safeguards are applied (for example contractual safeguards).
8. Security
- Encryption in transit, secret management controls, access restrictions, and operational monitoring are applied.
- No system is fully risk-free; customers should also apply least privilege and credential hygiene.
9. Your Rights
- Depending on jurisdiction, you may request access, correction, deletion, restriction, or portability of personal data.
- Requests: support@legacylint.com
10. Contact
- Privacy requests: support@legacylint.com
- Security reports: support@legacylint.com