Last updated: June 2026
LeaveLogger ("we", "us", "our") is a staff absence tracking platform operated at leavelogger.com. We are committed to protecting your personal data and your right to privacy. If you have any questions about this policy, please contact us at admin@leavelogger.com.
We collect the following information when you use LeaveLogger: your full name, work email address, job title, company name, and password (stored securely and encrypted). We also store your avatar initials and, if you choose to upload one, a profile photo. Leave data we collect includes: dates, leave type, working days, half-day periods, notes, approval or rejection status, and any rejection reason provided by your manager. We store a preference in your browser (localStorage) to remember whether you have dismissed the onboarding checklist. We do not collect sensitive personal data or data from third parties. Payment card details are collected and processed directly by Stripe, our PCI-compliant payment provider - they never touch or get stored on our servers (see section 9).
We use your data solely to provide the LeaveLogger service. This includes: creating and managing your account, enabling leave requests and approvals within your organisation, sending email notifications related to your account and leave requests (including approval, rejection, cancellation, and team member removal notifications), providing you with access to your dashboard, team calendar, and leave history, and displaying your profile photo and initials across the platform.
We do not sell your personal data to any third parties. We use the following trusted service providers to operate LeaveLogger: Supabase (database, authentication, and file storage for profile photos), Resend (email delivery), and Vercel (hosting). Each of these providers operates under their own privacy policies and data processing agreements. Your profile photo is stored in a Supabase Storage bucket and served via a public URL - only people within your company on LeaveLogger can see it in context.
We retain your personal data for as long as your account is active. If you are removed from a company on LeaveLogger (or ask us to delete your account), your profile, profile photo and leave history are deleted promptly, and in any case within 30 days. If your company's subscription ends, all company data is retained for 30 days so the company can resubscribe and pick up where it left off; after that it may be permanently deleted (see section 9). In short: 30 days is the single retention window that applies after any account or subscription ends.
Under UK GDPR, you have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (including your profile photo), object to processing of your data, and request a copy of your data in a portable format. To exercise any of these rights, please email us at admin@leavelogger.com.
LeaveLogger uses only essential cookies required for authentication and session management. We also use browser localStorage to store a single non-personal preference (whether you have dismissed the onboarding checklist). We do not use tracking cookies, advertising cookies, or any third-party analytics. You cannot opt out of essential cookies as they are required for the platform to function.
We take the security of your data seriously. All data is encrypted in transit using HTTPS. Passwords are hashed and never stored in plain text. Profile photos are stored in a secure Supabase Storage bucket. We use industry-standard security practices and regularly review our systems to protect your data.
LeaveLogger offers Core (65p per user per month) and Pro (£1 per user per month), each with a 14-day free trial. Payment information is handled by Stripe, a PCI-compliant third-party payment provider - we never store your card details directly. If your subscription ends (through cancellation or failed payment), access is suspended and your company data is retained for 30 days so you can resubscribe; after that period it may be permanently deleted. We will notify the account owner by email before any deletion.
We may update this privacy policy from time to time. We will notify you of any significant changes by email. Continued use of LeaveLogger after changes are made constitutes your acceptance of the updated policy.
If you have any questions about this privacy policy or how we handle your data, please contact us at admin@leavelogger.com. We aim to respond to all enquiries within 5 working days.