Privacy policy
Last updated 8 November 2026.
Who is responsible
Stedhold is responsible for the personal data described here. Contact: hello@stedhold.com.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Name and email of workspace members | To sign people in and send invitations | Until removed from the workspace or the account ends |
| Billing details (name, email, invoices; card details stay with the payment processor) | To bill you | As long as tax and accounting law requires |
| Messages sent through our forms | To reply | Until you ask us to delete them |
| Request logs (IP address, time, URL, user agent) | Security and abuse prevention | 90 days |
| DNS queries made by hosted apps | Detecting malware and abuse | 30 days |
| The code and files you upload, and private settings and keys | To build and run your apps | Until you remove the app or the account ends |
Database backups are kept for 7 days. Apps you host may collect their own data; you are responsible for that data and for telling your users about it.
Cookies
Stedhold uses only cookies needed to sign you in: __Host-stedhold_session for the console and __Host-stedhold_app for an app you open. There are no advertising or analytics cookies.
Who processes data for us
We share data only with the providers listed on https://stedhold.com/legal/subprocessors, and only to run the Service. We do not sell personal data.
Where data is stored
In the United States, on AWS in the US East (Ohio) region.
Your rights
You can ask to see, correct, export or delete your personal data by writing to hello@stedhold.com. We answer within 30 days. Depending on where you live, you may also have the right to object to processing or to complain to a data protection authority.
Changes
We will post changes here and update the date above. For material changes we will email workspace owners.