Marketing analytics are aggregated before any human sees them. Contact form messages are routed to the inbox of the person best positioned to reply. Managed-tier usage counters drive billing and capacity planning, nothing more.

Error telemetry is retained for 90 days, then purged. Analytics events age out after 14 months per GA4 defaults. Invoices and tax records are retained for 7 years as required by law. Audit rows created inside your self-hosted deploy live under your retention policy, not ours.

The managed tier relies on a small set of named subprocessors: a cloud hosting provider, a transactional email vendor, an error telemetry vendor, and a payments processor. The current list, with sub-processors' privacy pages, lives at cavalry.sh/trust and is updated before new processors are engaged.

GDPR and CCPA rights are honored regardless of where you live. Email privacy@cavalry.sh with your request; identity verification takes up to five business days, fulfillment up to thirty. We do not sell personal data.

We post revisions to this page with a dated changelog. Material changes affecting existing customers are announced by email at least thirty days in advance.