How Custody uses cookies, storage, and analytics

Custody may use account information such as your name, email address, organisation membership, sign-in provider, and basic profile details needed to operate your access to the app.

Inside the app, Custody may also store workspace information entered by users, including projects, people, resources, access records, notes, audit history, and related operational data.

Custody also uses limited technical data such as authentication state, theme preference, and privacy-friendly usage analytics.

Custody uses personal data to provide the service, manage user access, operate organisations and projects, maintain security, respond to enquiries, and improve the site and app.

Where needed, Custody uses personal data because it is necessary to provide the service, respond to someone who has asked about it, or support the normal operation and security of the product.

Custody does not use personal data for advertising profiling or targeted ad tracking.

When you sign in, Custody uses essential authentication cookies to keep your session active and secure. These cookies are used to provide the service you have asked for and are not used for advertising.

Custody also stores your theme preference locally in the browser so the site can remember dark mode or light mode between visits. This is stored in local storage rather than a cookie.

Custody uses Plausible Analytics to understand route-level usage and key conversions. Plausible is configured as a privacy-friendly analytics tool.

Custody does not use advertising pixels, session replay, or invasive tracking tools on the site.

Custody may share data with service providers that help operate the product, such as hosting, database, analytics, authentication, and email providers.

This may include providers such as Microsoft or GitHub for sign-in, Plausible for analytics, and Resend for transactional email.

Custody keeps personal data for as long as it is needed to operate the service, maintain security, comply with legal obligations, and support legitimate business records.

If a fixed retention period is not appropriate, Custody uses the nature of the data, the active status of the account or organisation, and operational or legal needs to decide how long it should be retained.

Depending on the circumstances, you may have rights to access, correct, delete, restrict, or object to the use of your personal data, and to request a copy of it.

If you have a concern about how Custody handles personal data, contact hello@custodyhq.com. If you are in the UK, you also have the right to complain to the Information Commissioner's Office.