Privacy Policy
What we collect, and why
| Data | Purpose | Source |
|---|---|---|
| Email address | To identify your account and sign you in via Google | Google Sign-In |
| Organisation and role | To control what trial data you can access within your organisation | Set by an administrator |
| Actions you take in the app (what, when, in which organisation) | Security and audit logging, and to diagnose problems | Generated by the app as you use it |
| Standard web server logs (IP address, timestamps) | Security and troubleshooting; kept only briefly | Generated automatically by our hosting provider |
We do not collect your name, profile picture, or any other Google profile information — sign-in is restricted to your email address only.
Access to Stats Plan is provisioned by an administrator; there is no public self-service sign-up, so we only hold data for people authorised to use the service.
Legal basis for processing
We process this data because it's necessary to provide you with the service you or your organisation has asked us to provide.
Who we share data with
- Google — for authentication (Sign in with Google) and for storing uploaded documents (Google Cloud Storage).
- Heroku — hosts the application.
We do not sell your data, use it for advertising, or share it with anyone else.
How long we keep it
We keep your account data for as long as your account is active. When an account is deleted, we permanently remove your organisation membership, activity logs, and Google account link. Trial data you were responsible for is deleted or reassigned to another statistician.
Cookies
We use one strictly necessary session cookie to keep you signed in. We don't use analytics, advertising, or tracking cookies.