Privacy Policy

No tracking, no cookies

The IT Lead does not use tracking cookies, analytics scripts, advertising pixels, or any third-party monitoring. There is no cookie banner because there are no cookies. Server logs are kept only for operational purposes and are not used for profiling.

Data we process

We process the following categories of personal data:

• — Account data: your email address and full name, for authentication.
• — Workspace data: workspace name and timezone, for scheduling reviews.
• — Service account metadata: account names, environments, and owner email addresses that you import.
• — Attestation data: owner responses to attestation requests.
• — Audit data: records of actions taken within the application.

We do not store passwords, API keys, access tokens, or any credentials for the service accounts you track.

Processors

The following third-party processors process personal data on our behalf:

• — Hosting & Frontend: Bolt / Netlify. Hosts the web application and serves it to your browser.
• — Database & Authentication: Bolt Database / Supabase. Stores all application data and handles user authentication.
• — Email delivery: SendGrid. Sends transactional emails (attestation requests, reminders) on our behalf.

No other processors are used. No data is shared with advertising or analytics providers.

Legal basis

Processing is based on Art. 6(1)(b) GDPR (performance of a contract) for account and workspace data, and Art. 6(1)(f) GDPR (legitimate interest) for audit logging necessary to operate the service securely.

Your rights

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. To exercise any of these rights, contact us at team@theitlead.com.

Supervisory authority

The responsible supervisory authority is the Sächsische Datenschutzbeauftragte:

Sächsischer Datenschutzbeauftragter
Archivstraße 40 I
01097 Dresden
Germany