Last updated: 2026-05-02. Pre-customer placeholder; will be revised as the product is rolled out for paying customers.
What we collect
- Account info: name, email, organization (when you sign up)
- Content you author: stored in the StaticOwl graph; encrypted at rest in S3
- Build metadata: timestamps, file sizes, deploy events; used for billing and observability
- Diagnostic logs: request IDs, error messages, query latencies; retained 30 days
What we don't collect
- No third-party trackers on staticowl.com or the admin UI
- No selling of customer data, ever
- No reading of your content for ML training
Your rights
- Export everything at any time — JSON + Markdown bundle
- Delete everything at any time — we keep a 30-day soft-delete window for accidental deletes, then hard-delete from the graph + audit chain (tombstone retained for tamper-evidence)
- Request a copy of any logs we hold about your account
- Self-host — Enterprise can run StaticOwl on their own infrastructure with no data leaving their environment
For data subject requests, email privacy@staticowl.com.
Subprocessors
- AWS — primary hosting (us-east-1)
- Cognito — user authentication
- Anthropic / OpenAI / Replicate / fal.ai — AI features (per-call, only when you opt in or BYO key)
- CloudFront — CDN
- SES — transactional email
We will publish a full subprocessor list when we ship to paying customers.