Privacy Policy

Last updated: April 17, 2026

1. Overview

Lockstep Technology Group ("Company", "we", "us") operates the LTG API Portal. This policy describes how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

Data Type	Purpose	Retention
Name, email	Account creation, communication	Duration of account
Password (hashed)	Authentication	Duration of account
API usage logs	Rate limiting, analytics, billing	90 days
Request traces	Debugging, observability	30 days
IP addresses	Security, audit logging	90 days
Payment info	Subscription billing (via Stripe)	Managed by Stripe

3. How We Use Your Information

• To provide and maintain the Service
• To authenticate your identity and authorize API access
• To enforce rate limits and usage quotas
• To send transactional emails (subscription confirmations, API key delivery, password resets)
• To improve the Service based on usage patterns
• To comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — payment processing
• Resend — transactional email delivery
• Railway — cloud infrastructure hosting
• Authentik — identity and access management

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, API key masking, role-based access control, and comprehensive audit logging. API keys are never stored in plaintext in logs or analytics.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Opt out of non-essential communications

7. Cookies

We use session cookies for authentication (HTTPOnly, SameSite=Lax, Secure in production). We do not use tracking cookies or third-party advertising cookies.

8. Data Retention

Account data is retained for the duration of your account. Usage logs are retained for 90 days. Request traces are retained for 30 days. Audit logs are retained for 90 days. You may request deletion of your account and data at any time.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us at support@locksteptg.com.