Legal information

Privacy policy

Before public release, the owner must provide the legal entity, contact information, data retention period, and applicable jurisdiction. This placeholder must not be published.

Data processed by the system

Under organization permissions, the product processes account identities, channel configuration, media submitted by users, digital assets, production tasks, and necessary runtime evidence. The self-hosted Logto instance owns identity facts; object storage owns media bytes.

Purpose of processing

Data is used only for content production, organization collaboration, delivery, and security operations that users explicitly initiate. The system never replaces a user choice with an undeclared data source or provider.

Release blocker

The final policy must identify the data controller, third-party processors, cross-border handling, and deletion mechanisms. Without these legal facts, a public deployment cannot be described as production ready.