Your data and your controls.

What the pilot stores

Accounts store an email address and a password hash. Your workspace stores saved node public keys, labels, alert preferences, incidents, and pilot requests. API keys are stored as hashes. Webhook URLs, signing secrets, and queued message bodies are encrypted at rest with a server-held key.

Payment telemetry

Submitted outcomes contain a customer-generated event ID, outcome, amount, fee, latency, attempt count, failure category, and timestamp. Do not submit invoices, payment preimages, payment hashes, destination identifiers, node credentials, or raw logs. The LND collector keeps its macaroon and node certificate in your own infrastructure and hashes event identifiers with a local secret before export.

Delivery and providers

Verification and recovery emails are sent when you request them. Monitor emails and daily/weekly reports require a verified address and your opt-in. Webhooks require a reviewed host and your configuration. Your email provider receives email content; your configured webhook service receives incident payloads. Disable alerts or reports in your workspace at any time.

Retention

The monitoring job removes payment outcomes older than 90 days, expired access tokens, and abuse counters older than two days. Completed or abandoned queued-message records are removed after seven days. Saved monitors and incidents remain until you remove them or delete your account. An encrypted deletion journal retains an account fingerprint and original creation timestamp for 15 days so restored data can be removed again. Encrypted operational database backups are retained for 14 days and expire on their normal rotation.

Export and deletion

Download your workspace data or permanently delete your account from the “Your data” section after entering your current password. Deletion removes live account data and pending deliveries. Requests already in progress may finish, and encrypted recovery backups can retain the deleted record until rotation. A recovery restore must honor deletions recorded after the backup.

Analytics and infrastructure

Public marketing pages use the existing Google Analytics integration. Private account, recovery, administration, and report pages exclude it. Infrastructure access logs can contain request URLs and IP addresses; one-time account links use URL fragments so the token is not sent in the request URL. Do not put secrets in query parameters.

For account or data questions, contact hello@optaimaze.com.