Privacy Policy
Summary
Logethos is a sole proprietorship based in India. This policy covers the personal data Logethos handles as a company: visits to this website, email sent to the addresses published here, and the account and billing records behind the products.
The short version. This website sets no cookies, runs no analytics product, and loads nothing from a third-party domain. Data held by Logethos is stored in Mumbai, India. Content that customers upload to a Logethos product is never used to train a model. Anything held about a person can be exported or deleted on request, and a Grievance Officer is published below.
1. Who this policy is from
| Entity | Logethos, a sole proprietorship based in India |
| Location | Mumbai, Maharashtra, India |
| Privacy contact | privacy@logethos.com |
| Grievance Officer | Grievance Officer, grievance@logethos.com |
Logethos is the Data Fiduciary for the personal data described here.
2. The law this policy is written under
Logethos operates from India. The governing regime for this policy is the Digital Personal Data Protection Act, 2023 (the DPDP Act). That Act is why a Grievance Officer is published below, under Section 13 of the Act, and why the rights listed in section 9 of this policy exist.
Logethos does not direct its services at any particular country or region, does not claim compliance with any foreign privacy regime, and holds no certification from any privacy authority. What follows describes practices rather than regimes: where data is stored, who receives it, how long it is kept. Those statements stay true whichever law a reader is applying.
3. What this policy covers, and what it does not
This policy covers:
- Visits to
logethos.comand its pages. - Email sent to the addresses published on this site.
- Account, billing, and support records held by Logethos for a customer of any of its products.
Each product also publishes its own privacy notice describing what happens to the documents and content inside it. For Evigate, that notice is at evigate.logethos.com/policies/. Where a product notice and this policy describe the same entity fact, such as the location, the governing law, or the vendor list, this site is the source of truth.
4. What is collected on this website
The website is a set of static pages. It requires no account, sets no cookies, and contains no analytics tag, advertising pixel, session recorder, or third-party embed. Fonts are served from the same domain rather than from a font network.
| Category | What it is | Where it comes from |
|---|---|---|
| Request logs | The web server records the requesting IP address, timestamp, requested path, response status, referrer, and user agent string | Generated automatically by the server on each request |
| Browser storage | A theme preference stored in the browser under logethos-theme, set only if a visitor chooses light or dark explicitly | Set by the visitor, held in the browser, never sent to the server |
| Email correspondence | Whatever a sender chooses to put in a message to one of the published addresses, including their address and the message body | The sender |
Request logs are used to operate and secure the server. They are not joined to any profile, not used to track a visitor between visits, and not used for behavioural analysis.
Pages on this site invite contact by email link rather than by form. If a form is added, this policy is updated to describe what it collects before that form goes live.
5. What is collected through the products
Product accounts involve more than a website visit. Across the Logethos products, the categories are:
| Category | Examples |
|---|---|
| Account data | Email address, organisation name, and a password hash. Accounts created through a federated sign-in have no password |
| Session data | Server-side session records keyed by a token hash, plus anti-forgery tokens |
| Customer content | The documents, questionnaires, and generated output a customer puts into the product |
| Billing data | Subscription plan, status, and the customer identifier held by the payment provider |
| Usage records | Per-organisation counts and a cost ledger for the calls a run consumed |
| Operational logs | Request metadata and error events |
Document contents and full model prompts are never written to logs. Card numbers are handled entirely by the payment provider and are never seen or stored by Logethos. Special category data is not collected deliberately.
The product's own privacy notice describes how each of these is handled in that product.
6. Why it is processed
| Purpose | Data used |
|---|---|
| Serve the website and keep the server available | Request logs |
| Answer a message and keep a record of the exchange | Email correspondence |
| Create and authenticate an account | Account and session data |
| Operate the product for the customer | Customer content, usage records |
| Charge for a subscription and meet tax and accounting obligations | Billing data |
| Investigate faults and abuse | Operational logs, request logs |
| Meet a legal obligation | As required |
Logethos sends no marketing email, runs no advertising, and sells no personal data to anyone. Personal data is not used to train models, and neither is customer content.
7. Who else receives it
A small, fixed set of vendors is used to run the company. The current list, what each one does, what it receives, and where it is located, is published at Subprocessors.
Data may also be disclosed where the law requires it, or to a successor entity in connection with a sale of the business, in which case affected customers are notified.
8. Where it is stored, and for how long
Everything Logethos holds directly is stored in Mumbai, India, on a single-tenant virtual private server. Some vendors named on the Subprocessors page are located outside India, so the specific data described there reaches those countries. Under the DPDP Act, transfers outside India are permitted except to countries the Government of India restricts. None of the vendors used are in a restricted country.
| Record | Kept for |
|---|---|
| Customer content in a product | Until the customer deletes it. There is no fixed expiry |
| Account and billing records | The life of the account, then the period required for tax and accounting purposes |
| Email correspondence | While the matter is open, then as a record of the exchange |
| Server request logs | Rotated on the server; short-lived and not archived |
| Backups | Cycled on a rolling schedule, described in the Security page |
Deleting content in a product removes the database rows and the stored files. Copies inside a backup age out with that backup rather than disappearing the moment the deletion runs.
9. Rights, and how to use them
A person whose data Logethos holds may ask for:
- Access. A summary of what is held about them and who it has been shared with.
- Correction. Correction of inaccurate data, and completion or updating of incomplete data.
- Erasure. Deletion of data that is no longer needed for the purpose it was collected for, subject to any record Logethos is required by law to keep.
- Nomination. Nomination of another person to exercise these rights in the event of death or incapacity, as the DPDP Act provides.
- Withdrawal of consent, where the processing rests on consent.
Inside the products, export and deletion are self-serve: a customer can export a portable snapshot of an organisation's data and can delete any document or the entire organisation from settings, without asking anyone.
For anything not covered in the product, email privacy@logethos.com. Requests are answered within the period the applicable law allows. Exercising a right does not affect service or pricing.
10. Grievance Officer
The DPDP Act (Section 13) requires a published contact for complaints about how personal data has been handled. That contact is:
Grievance Officer
Logethos, Mumbai, Maharashtra, India
grievance@logethos.com
Logethos is operated by one person, so the Grievance Officer is that person. A complaint sent to this address is acknowledged within five working days and answered as quickly as the matter allows. A complainant who is not satisfied with the outcome may escalate to the Data Protection Board of India.
11. Children
The products are business tools and are not directed at children. Logethos does not knowingly collect personal data from anyone under 18, and does not run behavioural monitoring or targeted advertising of any kind.
12. Security
The controls behind these commitments, including what is encrypted and what is not, are described in the Security page rather than summarised here.
13. Changes
This policy is updated when the practice it describes changes. The version and the last-updated date at the top of this page are the record. Material changes to how customer data is handled are communicated to affected customers rather than left to be discovered here.
14. Contact
- Privacy and data requests: privacy@logethos.com
- Grievances: grievance@logethos.com
- Security reports: security@logethos.com
- Post: Logethos, Mumbai, Maharashtra, India