Sprint Log Parser Logo Sprint Log Parser
Log in Get Started
Docs / Legal & Policy / Privacy Policy

Privacy Policy & Data Governance

At Sprint Log Parser, we prioritize the confidentiality, integrity, and privacy of your log telemetry and infrastructure metrics. This policy transparently details what our log shipper agent does and does not do, how your log data is handled, and your privacy rights under NDPR (Nigeria Data Protection Regulation) and GDPR frameworks.

🚀 1. Log Shipper Scope: What It Does & Does Not Do

✅ What the Log Shipper DOES:

  • • Reads Configured Log Files: Continuously tails web server access/error logs (Nginx, Apache), application logs (Laravel, Node.js), and system logs (Syslog, Docker) specified in your configuration.
  • • Extracts Diagnostic Attributes: Parses client IP addresses, HTTP request paths, status codes, user-agents, request duration, and error exception traces.
  • • Applies Local PII Scrubbing: Masks sensitive tokens, credit card numbers, passwords, and BVNs prior to HTTP transport when PII auto-redaction is enabled.
  • • Synchronizes Blocklists: Downloads Sudo Mode auto-blocked IP addresses to apply local firewall drops (Nginx map, Cloudflare WAF, or iptables rules).

❌ What the Log Shipper DOES NOT DO:

  • • Does NOT Scan Source Code or Databases: The shipper never inspects application source code, environment .env files, or SQL database tables.
  • • Does NOT Execute Remote Commands: The shipper contains no arbitrary shell execution capabilities; it strictly streams diagnostic text.
  • • Does NOT Access Private Unrelated Files: Only file paths explicitly declared in your log shipping agent configuration are opened.
  • • Does NOT Track End-User Devices: The shipper does not place cookies, track personal browser histories, or fingerprint individual end users.

📊 2. How We Handle Your Log Data

🛡️ What WE DO With Your Logs:

  • • Real-Time Threat Detection: Analyze request signatures against OWASP attack patterns (SQLi, RCE, XSS, Path Traversal) to trigger automated Sudo Mode IP blocking.
  • • Diagnostic Analytics & Reporting: Aggregate request counts, status code distribution, system health metrics, and generate executive PDF audit reports for your workspace.
  • • Abuse & Reputation Lookup: Query threat IPs against AbuseIPDB databases to score malicious confidence levels.

🚫 What WE DO NOT DO With Your Logs:

  • • WE DO NOT Sell or Rent Your Data: Your log data is strictly confidential to your workspace. We never sell, rent, or trade telemetry to third parties or data brokers.
  • • WE DO NOT Share Across Customers: Multi-tenant isolation ensures no other customer or organization can view or query your log records.
  • • WE DO NOT Train Public AI Models: Your proprietary logs are never used to train public machine learning or AI models.

🔒 3. Automated PII & PCI-DSS Redaction

Sprint Log Parser incorporates automated PII (Personally Identifiable Information) and PCI-DSS compliance redaction filters. When enabled on your workspace settings:

  • Payment Card Numbers (PANs): Credit and debit card strings (e.g. 16-digit Visa/Mastercard) are masked prior to storage (e.g. 4111-XXXX-XXXX-1111).
  • Financial Identification: Bank Verification Numbers (BVNs), CVV security codes, and account numbers are auto-redacted.
  • Authentication Tokens: Authorization headers, Bearer tokens, API secret keys, and passwords are sanitized with [REDACTED_TOKEN].

🗑️ 4. Automated Retention & Permanent Deletion

Log telemetry is automatically retained according to your workspace tier retention schedule (3 days for standard developer workspaces; up to 365 days for PCI-DSS archival compliance). Once the retention window expires, logs are permanently deleted from database storage by background pruning tasks.

📜 5. NDPR & GDPR Rights

Under NDPR and GDPR regulations, workspace administrators retain full control over stored telemetry, including rights to export audit CSVs, update log retention policies, or request immediate account data purge. All data in transit is encrypted using 256-bit SSL/TLS 1.3 transport security.

✉️ 6. Privacy Contact & Inquiries

For privacy questions, data protection inquiries, or data deletion requests, contact our Data Protection Officer at info@megasprintlimited.com.ng.