Last updated: March 2026

What we store

• Email address — provided at signup, used to send your API token and notify you about usage limits or service issues.
• API token hash — a SHA-256 hash of your token. We never store your plain-text token.
• Namespace and node data — the dependency graph you push, including node IDs, states, reasons, and solutions. Reasons and solutions are stored in plaintext.
• Event history — a log of state changes for your nodes, retained according to your plan.
• Notification rules — webhook URLs and email preferences you configure.

What we do not store

• Billing information — payments are handled entirely by PayPal.
• IP addresses or access logs.
• Any other personally identifiable information beyond your email address.

How we use your data

Your email is used solely to deliver your API token at signup and to send notifications you have configured. We do not share, sell, or distribute your email or any other data to third parties.

Data breach notification

In the event of a security breach, all affected customers will be notified within two weeks of detection.

Data Protection Officer

Kevin Hutchinson
dpo@legendum.co.uk