Privacy

Who we are

Vakt360 is an error-monitoring service operated by Dalysie AS, a company registered in Norway. For your own account, billing and service-usage data, Dalysie AS is the data controller. For the error events your applications send us, Dalysie AS acts as a data processor on your behalf, you decide what your apps report, and we process it only to provide the service. You can reach us about privacy at support@vakt360.com.

The short version

Your apps send us error events so you can see what is breaking. Before we store an event, we scrub common sensitive values (authorization headers, cookies, tokens and card-like numbers) on our servers. We keep the account and payment details needed to run the service, we log basic usage but never sell your data, and everything is hosted in the European Union. You can export or delete your account at any time.

Error event data

The heart of the service is the events your applications send through a Sentry-compatible SDK: exception types, stack traces, breadcrumbs, tags, release and environment, and any user or request context you choose to include. Because you control your SDK configuration, you decide what is sent.

To reduce the risk of sensitive data being stored, our ingest pipeline redacts values whose key or content looks sensitive (for example Authorization, Cookie, API tokens, and card-like digit runs) before the event is written to our database. You remain responsible for not deliberately sending data you are not permitted to process.

Account information

To run your account we store your email address, name (if given), a securely hashed password, your two-factor settings, your workspace and project details, and your DSN keys. We use this to authenticate you, run your workspaces, and send you service and security emails.

Team and invitations

When you invite someone to a workspace we store their email to deliver the invite and, once accepted, their membership and role. Workspace owners and admins can see the members of their own workspace.

Payments

Paid plans are handled by our payment provider, Polar, who acts as merchant of record. Card details are entered on Polar's hosted checkout and are never seen or stored by us. We store the resulting subscription status, plan, and the provider's customer and subscription identifiers so we can apply your plan.

Cookies and local storage

We use a single strictly-necessary cookie to keep you signed in (an opaque session token; only its hash is stored on our side). We also use your browser's local storage to remember preferences such as your chosen theme and workspace. We do not use advertising or cross-site tracking cookies, so there is no consent banner to click through.

Analytics

We keep basic, aggregate usage metrics to understand how the product is used and to keep it reliable. We do not use analytics that profile you across other sites, and our metrics never include the contents of your error events.

Subprocessors

We use a small number of vetted service providers to run Vakt360, for hosting, email and payments. The current list, with each provider's purpose and location, is on our subprocessors page. We will update that list before adding a new subprocessor that handles customer data.

Where your data is processed

Your account data and error events are hosted and processed on Microsoft Azure infrastructure in the European Union (Sweden). Payment processing by Polar and transactional email may involve providers outside the EU under appropriate safeguards; see the subprocessors page.

How long we keep your data

Error events are retained for the window attached to your plan (30 days on Free, longer on paid plans) and are then deleted automatically. Account and billing records are kept for as long as you have an account, and afterwards only as long as needed to meet legal and accounting obligations. Deleting your account removes your account data and the workspaces you solely own.

Legal basis for processing

Where the GDPR applies, we rely on: contract (to provide the service you signed up for), legitimate interests (to secure, maintain and improve the service, and to prevent abuse), legal obligation (for accounting and compliance), and, for the error events processed on a customer's behalf, the instructions in our Data Processing Agreement.

Security

Data is encrypted in transit. The database is private and reachable only from our own services; secrets are held in a managed key vault. We enforce hashed passwords, offer two-factor authentication, scrub PII from events before storage, and sit behind a web application firewall. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data. Our full approach is on the security page; if you believe you have found a vulnerability, please report it to security@vakt360.com.

Your rights and choices

Subject to applicable law, you can access, correct, export or delete your data. You can export a copy of your account (Settings › Security) and delete your account at any time. To exercise other rights, or to complain to a supervisory authority, contact us at support@vakt360.com.

If you are a business customer

When you use Vakt360 to monitor your own applications, you are the controller of the personal data in the events you send, and we are your processor. Our Data Processing Agreement sets out how we handle that data on your behalf, including security measures, subprocessors, and assistance with data-subject requests.

Children

Vakt360 is a tool for developers and organisations and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data through your account, contact us and we will remove it.

Changes to this policy

We may update this policy as the service evolves. We will change the date at the top and, for material changes, tell you by email or in the product.

Contact

Questions about privacy? Email support@vakt360.com.