In short
We never sell your data. We collect only what the service needs, your error data stays yours, everything is stored in the EU, and you can have it deleted whenever you ask.
- Error data kept
- 7 to 365 days
- Backups after deletion
- 30 days
- Reply to a request
- 30 days
- Where data is kept
- EU
For comprehensive information about GDPR compliance, your data protection rights, and detailed data processing information, please visit our Data Processing Agreement.
1. Who we are
LaraBug is operated by Intilli, a company registered in Belgium under number 0740.911.734, with its seat at Nazarethsesteenweg 13, 9800 Deinze. How to reach us is at the end of this policy.
2. What information we collect
| Category | What we collect |
|---|---|
| Account information |
|
| Error tracking data |
|
| Billing information |
|
| Usage information |
|
Your responsibility: you are the data controller for any personal data in your error logs. You must ensure that sensitive information (passwords, API keys, personal data) is filtered before being sent to LaraBug. While we provide filtering tools, you are ultimately responsible for what data your application transmits.
3. How we use your information
| Purpose | What it covers |
|---|---|
| Provide services | Track errors, send notifications, manage your account |
| Process payments | Handle subscriptions and billing |
| Communicate | Send service updates, support responses and important notices |
| Improve services | Analyse usage patterns and optimise performance |
| Security | Prevent fraud and unauthorised access |
| Legal compliance | Meet regulatory requirements |
For detailed information about the legal basis for processing and GDPR compliance, see our Data Processing Agreement.
4. Data retention
We retain your data as follows:
| What | How long |
|---|---|
| Error data | Retained according to your plan (7 to 365 days), then automatically deleted |
| Account data | As long as your account is active |
| After deletion | Up to 30 days in backups, then permanently removed |
| Legal records | As required by law (e.g. invoices for 7 years) |
5. Data sharing
Service providers
| Provider | Purpose | Location |
|---|---|---|
| Mollie | Payments | Netherlands (EU) |
| Postmark | Transactional email | EU data region |
| Hetzner | Infrastructure | Germany (EU) |
| Ploi | Deployment and server management | Netherlands (EU) |
Legal requirements
We may disclose information if required by law, court order, or to protect our rights and safety.
We never sell data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
All service providers have data processing agreements and comply with GDPR. For a complete list of sub-processors, visit our Data Processing Agreement.
6. Your privacy rights
| Right | What it means |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate information |
| Erasure | Delete your account and data |
| Portability | Export your data |
| Restriction | Limit how we process your data |
| Objection | Object to certain processing activities |
Exercising these rights is self-service
Head to Profile → Data to request a full data export, request a signed DPA, or schedule your account for deletion. Account deletion has a 30-day grace period so you can undo it from the email we send.
For anything that isn't available in the self-service flow (restriction, objection, or rectification of a field you can't edit yourself), email support@larabug.com. We respond within 30 days.
EU users: for detailed information about your rights under GDPR, data processing agreements, and how to exercise your rights, visit our Data Processing Agreement.
7. Data security
| Technical measures | Operational measures |
|---|---|
| Encryption in transit (TLS/SSL) and at rest | Limited access to data |
| Secure password hashing (bcrypt) | Employee security training |
| Regular security audits | Incident response procedures |
| Access controls and monitoring | Regular security backups |
| Encrypted backups |
Important: no system is 100% secure. You are responsible for maintaining the security of your account credentials. For comprehensive security and organizational measures, see our Data Processing Agreement.
8. Cookies
We use only essential cookies required for the service to function:
| Cookie | Purpose |
|---|---|
session |
Maintains your login session |
csrf_token |
Protects against cross-site request forgery |
remember_me |
Optional. Keeps you logged in across sessions |
You can control cookies through your browser settings. Disabling essential cookies may affect functionality.
9. International data transfers
All customer data is processed and stored in the European Union (primarily Belgium and the Netherlands). We minimize international data transfers and ensure appropriate safeguards when necessary.
10. Children's privacy
LaraBug is not intended for children under 13. We do not knowingly collect information from children. If we discover we have collected data from a child under 13, we will delete it promptly.
11. Changes to this policy
- We'll notify you by email for significant changes
- We'll post a notice on our website
- Continued use means acceptance of the updated policy
12. Contact us
Company
Intilli
Registration 0740.911.734
VAT BE0740.911.734
Address
Nazarethsesteenweg 13
9800 Deinze
Belgium
You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.
Related: Terms of Service, the agreement that governs your use of LaraBug, and Data Processing Agreement, which covers the self-service tools for exercising your data rights.