Privacy Policy – BravaLog

2. What Data We Collect on the Landing Page

Data you provide

• Email address— when you join the waitlist.
• Survey responses— optional. For example, what app you used before and why you wanted something different.

Data collected automatically

• Analytics via Mixpanel— page views, clicks, and anonymous usage patterns. Only collected if you consent via the cookie banner.
• Server logs via Cloudflare— IP address, browser type, request time. Used for security and performance.

3. Why We Process Your Data (GDPR Article 6)

• Consent (Art. 6(1)(a))— You provide your email when you sign up. You can withdraw anytime by clicking the unsubscribe link in any email or by contacting us.
• Consent (Art. 6(1)(a))— Analytics cookies are set only after you accept the banner. You can withdraw by clearing cookies or contacting us.
• Legitimate interest (Art. 6(1)(f))— Server logs for security, fraud prevention, and keeping the service reliable.

4. Your Data Rights

Under GDPR, you have the right to:

• Access— get a copy of your data.
• Correct— ask us to fix inaccurate information.
• Delete— ask us to erase your data (the "right to be forgotten").
• Portability— receive your data in a machine-readable format.
• Object— object to processing based on legitimate interest.
• Withdraw consent— anytime, without affecting the lawfulness of prior processing.

How to exercise your rights: Email us at hello@bravalog.com. We'll respond within 30 days.

Right to complain:If you believe we've violated your rights, you can lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) at dataprotection.ro.

5. Data Retention

• Email addresses— kept until you unsubscribe or ask for deletion. Deleted within 14 days of your request.
• Analytics data— anonymized and retained according to Mixpanel's policies, then purged.
• Server logs— retained by Cloudflare for up to 72 hours.

6. Third-Party Data Processors

We work with these services to run BravaLog. Each has a GDPR-compliant data processing agreement:

• Supabase— database hosting for your email and survey data. Data residency: EU (Frankfurt, eu-central-1).
• Resend— sends welcome and notification emails. Email data may be processed in EU or US.
• Cloudflare— hosts the website, provides CDN, DNS, and security. Servers in multiple regions including EU.
• Sentry— application error monitoring (only active with your consent). Processes IP addresses and minimal request metadata so we can diagnose crashes. Data region: EU (de.sentry.io).
• Mixpanel— analytics platform (only active with your consent).

We do not sell or share your data with advertisers or other third parties.

7. International Data Transfers

Some of our processors may store data outside the EU. Where they do, we use Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent safeguards, to protect your rights under GDPR.

8. If You're Based in the UK

Your data is also protected under UK GDPR and the Data Protection Act 2018. You have the same rights as EU residents (Section 4). Complaints can be made to the Information Commissioner's Office (ICO) at ico.org.uk.

9. If You're Based in Canada

Your data is protected under PIPEDA. You have the right to access, correct, and withdraw consent for collection and use of your data. Email us at hello@bravalog.com. You can also lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

10. Cookies and Tracking

We use a cookie banner to ask for your consent. No analytics cookies are set until you accept. Once you do, we place a Mixpanel cookie and an anonymous identifier so we can see how people use the site. No cookies track you for advertising. You can withdraw consent anytime by clearing your cookies or contacting us.

11. Changes to This Privacy Policy

We may update this policy. For significant changes, we'll notify you by email or notice on the site. The "Last updated" date above always shows the most recent version.

12. Questions

If you have questions about this policy or your data, email us:

Paxfinity S.R.L.
CUI RO46789116 · J2022004233350
Aleea Martir Istvan Andrei 16-24, Timisoara, Timis, Romania
privacy@bravalog.com