Privacy Policy – BravaLog

2. What Data We Collect

Data you provide directly

• Email address — collected when you sign up for the waitlist.
• Survey responses — optional answers you provide during signup (e.g., training experience, goals).

Data collected automatically

• Analytics data via Mixpanel — page views, button clicks, and anonymous usage events. This data is only collected if you consent via the cookie banner. An anonymous identifier cookie is set only after consent.
• Server logs — IP address, browser type, and request timestamps collected automatically by Cloudflare for security and performance purposes.

3. Lawful Basis for Processing (GDPR Art. 6)

We process your personal data under the following lawful bases:

• Consent (Art. 6(1)(a)) — You provide your email address voluntarily when joining the waitlist. You may withdraw consent at any time by contacting us or clicking the unsubscribe link in any email.
• Consent (Art. 6(1)(a)) — Analytics cookies (Mixpanel) are only activated after you accept the cookie consent banner. You may withdraw consent at any time by clearing your cookies or contacting us.
• Legitimate interest (Art. 6(1)(f)) — Server-level logging by Cloudflare for security, fraud prevention, and infrastructure reliability.

4. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Data portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at hello@bravalog.com. We will respond within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian supervisory authority: ANSPDCP (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal) at dataprotection.ro.

5. Data Retention

• Waitlist email addresses are retained until you unsubscribe or request deletion. Upon request, your data will be deleted within 14 days.
• Analytics data is retained in Mixpanel in anonymized form and automatically purged according to Mixpanel's retention policies.
• Server logs are retained by Cloudflare for up to 72 hours for security purposes.

6. Third-Party Processors

We use the following third-party services to operate BravaLog. Each processes data under a data processing agreement (DPA) that complies with GDPR:

• Supabase — database hosting for waitlist signups.
• Resend — transactional email delivery (welcome emails).
• Cloudflare — hosting, CDN, DNS, and DDoS protection.
• Mixpanel — analytics (consent-gated via cookie banner).

We do not sell or share your personal data with third-party advertisers.

7. International Data Transfers

Some of our third-party processors may store or process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions, to protect your data in accordance with GDPR.

8. Additional Rights for UK Residents

If you are based in the United Kingdom, your personal data is protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You have the same rights as described in Section 4 above. International transfers of your data outside the UK are protected by International Data Transfer Agreements (IDTAs) or other approved safeguards. You may lodge complaints with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Additional Rights for Canadian Residents

If you are based in Canada, your personal data is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, and withdraw consent for the collection and use of your personal information. To exercise these rights, contact us at hello@bravalog.com. You may also lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

10. Cookies and Consent

We use a cookie consent banner on our website. No analytics cookies are set until you provide consent. If you consent, a Mixpanel analytics cookie and an anonymous identifier cookie are placed to help us understand how visitors use the site. No cookies are used for advertising. You can withdraw your consent at any time by clearing your browser cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If the changes are significant, we will notify you via email or a prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

BravaLog
Romania
hello@bravalog.com