LoamstackLast updated: 1 November 2026
Ship It! Software Limited operates Loamstack. This policy covers the account service at loamstack.ai. Connected products explain their own file and data processing in their policies.
Account information
We process your account identifier, email, profile name, and authentication information to create and secure your account. Supabase provides authentication. When you choose Google sign-in, we request your identity, email, and profile. Sign-in does not request access to Google Drive, Gmail, Calendar, or other Google data.
Product authorization
When you approve a connected product, it receives the identity information shown on the consent page. The shared account service manages organization and workspace membership. Products check their own permissions before giving access to content. This account site does not accept file uploads.
Separate Google provider authorization
Signing in with Google does not authorize a connected product to access your Search Console data. If you separately connect Google Search Console through Data Connector, that product requests its own read-only provider permissions and stores its provider credentials encrypted. Direct results are shared only with the product session or MCP client you authorize; they are not stored as reports in this account service. Connection and security metadata remain separate from explicit saved content in Data or Files. See Data Connector's privacy policy for the Google data flow, retention, disconnect and revocation details.
Cookies and web requests
We use host-only session and sign-in transaction cookies to keep you signed in and protect authentication flows. Cloudflare processes ordinary network and browser request information to host and protect the service. This site does not set advertising cookies.
Support and service providers
If you submit the support form, we send your name, email, and message as a support event to PostHog in the United States to review and investigate the issue. This deliberate support submission is separate from optional usage analytics. We do not attach your account sessions, cookies, access tokens or private file contents. Cloudflare, Supabase, and our service infrastructure process information needed to operate the account service. Sentry receives fixed failure labels and operation names to help investigate reliability. Our account diagnostics remove request details, user details, breadcrumbs, and extra context before reporting errors. We do not intentionally send form contents, passwords, sign-in links, or access credentials to Sentry. Do not put passwords or sensitive file contents in support messages.
Retention and security
New support events are retained under our configured PostHog project retention and deletion controls. Earlier support records retain their original expiry dates, up to 90 days; they are not automatically copied to PostHog. Account and authorization records are kept while needed to provide the service and meet security or legal obligations. Sign-in transactions expire. We use encrypted connections, protected cookies, and access controls. No online service can guarantee absolute security.
Your choices
You can sign out, request a password reset, and manage access within connected products. Use the support form to request access to, correction of, or deletion of your personal information. We may need to verify your identity before acting.
Policy changes
We may update this policy as the service changes. The date above identifies the current version. See our Terms.