In short
LaraBug is run by Intilli, a Belgian company. Your data is processed within the EU, under the technical and organisational measures this page sets out, and every right GDPR gives you is self-service from your profile.
- Breach notification
- 72 hours
- Signed DPA
- 5 business days
- Deletion grace period
- 30 days
- Where data is processed
- EU
Self-service from your profile
Every GDPR right on this page is self-service. Log in and open Profile → Data to:
- Request a signed Data Processing Agreement (DPA)
- Export a full copy of your data as a ZIP archive
- Schedule your account for deletion, with a 30-day grace period to change your mind
1. Our role under GDPR
| Party | Role | What it means |
|---|---|---|
| You | Data controller | You determine what data is logged in your application errors. You are responsible for ensuring compliance when logging personal data. |
| LaraBug | Data processor | We process error data on your behalf according to our Data Processing Agreement. We implement technical and organisational measures to protect your data. |
2. GDPR principles we follow
| Principle | How we apply it |
|---|---|
| Lawfulness, fairness and transparency | We clearly communicate how we process your data and only do so lawfully. |
| Purpose limitation | We only process data for the explicit purpose of error tracking and monitoring. |
| Data minimisation | We only collect data necessary for providing error tracking services. |
| Accuracy | You can update your account information at any time through your dashboard. |
| Storage limitation | Data is automatically deleted according to your plan's retention period (7 to 365 days). |
| Integrity and confidentiality | We use encryption, access controls and security monitoring to protect your data. |
| Accountability | We maintain records of processing activities and conduct regular compliance reviews. |
3. Your rights under GDPR
As a data subject in the EU, you have the following rights. We make it easy to exercise them:
| Right | How to exercise it |
|---|---|
| Access | Request a full data export from Profile → Data. We email you a ZIP archive with every record we hold on you. |
| Rectification | Update your profile, billing details, and email from the account settings. |
| Erasure | Delete your account from Profile → Data. You have a 30-day grace period to cancel via the email we send you. After day 30 the deletion is permanent. |
| Portability | Use the data export from Profile → Data. The archive ships as JSON, with a README that explains every file, so it is both machine- and human-readable. |
| Restriction | Email support@larabug.com with the specific processing you want paused. |
| Objection | Unsubscribe from marketing via the link in any email, or email support@larabug.com for broader objections. |
4. Data processing location
All customer data is stored and processed within the European Union. We do not transfer personal data outside the EU/EEA without appropriate safeguards.
5. Security measures
| Technical measures | Organisational measures |
|---|---|
| TLS/SSL encryption | Role-based access control |
| Database encryption at rest | Staff training on data protection |
| Secure password hashing | Confidentiality agreements |
| Regular security audits | Incident response procedures |
| Automated backups | Privacy by design principles |
6. The signed agreement
For customers who require a formal Data Processing Agreement (DPA), we provide a comprehensive agreement that covers:
- Subject matter and duration of processing
- Nature and purpose of processing
- Types of personal data and categories of data subjects
- Obligations and rights of the controller
- Security measures and sub-processors
- Data breach notification procedures
Customers can request a signed DPA directly from Profile → Data. We prepare it against the company details on your billing profile and email it to your account address within 5 business days. If you need something custom, email support@larabug.com.
7. Data breach notification
In the unlikely event of a data breach that affects your personal data, we will:
- Notify the relevant supervisory authority within 72 hours
- Notify affected data subjects without undue delay if there is a high risk to their rights and freedoms
- Provide details about the nature of the breach, likely consequences, and measures taken to address it
- Document all breaches and remedial actions
8. Sub-processors
We work with the following sub-processors to provide our services:
| Service provider | Purpose | Location |
|---|---|---|
| Mollie | Payment processing | Netherlands (EU) |
| Postmark | Transactional email delivery | EU data region |
| Hetzner | Infrastructure and server hosting | Germany (EU) |
| Ploi | Deployment and server management | Netherlands (EU) |
9. Questions or concerns?
If you have any questions about GDPR compliance, want to exercise your rights, or have concerns about how your data is processed:
Company
Intilli
Registration 0740.911.734
VAT BE0740.911.734
Address
Nazarethsesteenweg 13
9800 Deinze
Belgium
You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA) if you believe we have not handled your data appropriately.
Related: Terms of Service, the agreement that governs your use of LaraBug, and Privacy Policy, which covers what we collect and the legal basis for each processing activity.