Privacy Notice

1. Who we are

This Privacy Notice describes how Logusman Inc ("Bastion", "we", "us"), the operator of the Bastion service, collects and uses your personal data. Logusman Inc is the data controller for personal data processed in connection with the Service.

2. Personal data we collect

• Account data: name, email address, login credentials.
• Support data: messages, attachments, and information you share when contacting support.
• Usage and telemetry: pages visited, features used, error logs, performance metrics.
• Device and network data: IP address, browser type, operating system, device identifiers.
• Billing data: handled by Paddle as Merchant of Record (see Section 5).

3. Why we use your data

• To create and manage your account (legal basis: contract).
• To provide, maintain, and improve the Service (legal basis: contract / legitimate interests).
• To prevent fraud and secure the Service (legal basis: legitimate interests / legal obligation).
• To respond to support requests (legal basis: contract).
• To send service-related and, where permitted, marketing communications (legal basis: legitimate interests / consent).
• To comply with legal obligations (legal basis: legal obligation).

4. Cookies

We use essential cookies to operate the Service and may use analytics cookies to understand usage. You can manage cookie preferences in your browser settings.

5. Who we share data with

• Service providers and subprocessors: hosting, database, analytics, email, and customer support tools that help us run the Service.
• Paddle.com Market Limited ("Paddle"): our Merchant of Record. Paddle handles checkout, payments, subscription management, tax compliance, invoicing, and refunds. Paddle processes payment-related personal data as an independent controller under its own Privacy Policy.
• Professional advisers: legal, accounting, and audit professionals where reasonably needed.
• Authorities: where required by law, court order, or to protect rights, safety, or property.
• Successors: in the event of a merger, acquisition, or sale of assets, subject to appropriate safeguards.

6. International transfers

Your data may be transferred to and processed in countries outside your country of residence. Where required, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions.

7. Data retention

We retain personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. You may also have the right to lodge a complaint with a data protection authority. To exercise these rights, contact us through the support channels in the Service. We aim to respond within one month.

9. Security

We implement appropriate technical and organizational measures — including encryption in transit, access controls, and monitoring — to protect personal data. No system is fully secure, but we work to safeguard your information.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service.

11. Contact

For privacy questions, contact Logusman Inc through the support channels provided in the Service.