This policy explains how we handle personal data on firecrux.com, in our forms and chat, and in Firecrux accounts: the panel, the Client Portal and Firecrux for WordPress. We wrote it in plain language. If anything is unclear, ask us.
Who is responsible for your data
The controller of your personal data is GREENLOGIC Sp. z o.o., ul. Podwale 1/99, 50-043 Wrocław, Poland, entered in the National Court Register (KRS) under number 0000602965, VAT ID PL8943073554. Firecrux is our product brand. In this policy, “we” means GREENLOGIC Sp. z o.o..
For anything about your data, write to [email protected] or use the form on our Data Protection Contact page.
Data we process for our clients
Our products, Firecrux X-Ray QC, Firecrux CDP, Firecrux Automation and Firecrux Digital Intelligence, often process data that belongs to our clients, for example customer profiles in a CDP or visitor logs of a client's website. Our client is then the controller and we act as its processor under a data processing agreement. Questions about that data go to the company that uses our product, and we help it answer them.
What we collect and why
When you visit firecrux.com
Our servers and our network provider record technical data: your IP address, browser, the page you open and the time. We use it to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). We keep these logs only as long as we need them for security and troubleshooting.
We measure how the site is used with Google Analytics, loaded through Google Tag Manager, but only after you accept cookies in our banner. Until then, analytics stays off. Legal basis: your consent (Art. 6(1)(a) GDPR). Google Analytics keeps this data for no longer than 14 months. You can change your choice at any time with Cookie Settings in the footer.
When you write to us
Our contact, inquiry and calculator forms ask for your name, email address, company and the details of your case; some also ask for a phone number, industry or website. We use them to reply and to prepare an offer. Legal basis: steps you ask for before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Art. 6(1)(f)). We keep inquiries until the limitation period for possible claims ends, which for business claims is 3 years (Art. 118 of the Polish Civil Code). If a contract follows, we keep them for as long as it lasts and until claims under it become time-barred.
When you use the chat
The chat on our site is an AI assistant. It answers from our website and documentation and passes your question to our team when needed. Your messages and the page you were on are processed by a provider of AI language models acting as our processor, and we store the conversation so our team can follow up. Please do not share sensitive data in the chat. Legal basis: our legitimate interest in answering your questions (Art. 6(1)(f) GDPR). We keep a conversation as long as we need it to answer you; if it turns into an inquiry, we keep it as described above.
Newsletter
If you subscribe, we use your email address to send product updates and new use cases. Legal basis: your consent (Art. 6(1)(a) GDPR). Every email has an unsubscribe link, and we keep your address until you unsubscribe.
Free website checks
When you check a website with our free tools, our servers fetch its public pages. We need only the address you enter, not data about you, and the request is logged like any other visit.
Firecrux accounts
If you have an account in the Firecrux panel, the Client Portal or Firecrux for WordPress, we process your name, email address, company, login details and a record of activity in your account. If you connect Google Search Console or Google Analytics, we read data about your website with the access you grant, and you can disconnect them at any time. Legal basis: our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in keeping accounts secure (Art. 6(1)(f)). We keep account data while the account is active. After it is closed, we delete it, except data the law requires us to keep and data we need until claims under our contract become time-barred.
Payments and invoices
Paid plans are billed through Stripe, which processes your card details; we do not see or store full card numbers. We keep invoices and accounting records for 5 years from the end of the calendar year in which the tax payment deadline passed, as Polish tax and accounting law requires (Art. 70 and Art. 86 of the Tax Ordinance Act and Art. 74 of the Accounting Act; Art. 6(1)(c) GDPR).
Job applications
If you send your CV to [email protected], we use it for the recruitment you apply for. Legal basis: steps before an employment contract (Art. 6(1)(b) GDPR) and your consent for anything beyond what the Labour Code requires (Art. 6(1)(a)). We delete applications when the recruitment ends, unless you agree that we keep yours for future recruitments; then we keep it until you withdraw that consent.
Our social media profiles
When you visit our Facebook or LinkedIn profile, the platform processes your data under its own privacy policy. For page statistics, we may be joint controllers with it.
Who we share data with
We do not sell your data. We share it only with providers who help us run our services, under data processing agreements, and with public authorities when the law requires it:
- hosting: Contabo GmbH (Germany) and LH.pl (Poland);
- network, security and content delivery: Cloudflare;
- file storage: Backblaze, in its European region;
- email, analytics and tag management: Google;
- payments: Stripe;
- AI language models, for the chat and product features;
- accounting, legal and IT advisers bound by confidentiality.
On request, we will tell you which AI model providers we use.
Transfers outside the European Economic Area
Some providers, such as Google, Cloudflare, Stripe and AI model providers, may process data in the United States or other countries outside the EEA. We rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, or on the European Commission's standard contractual clauses. You can ask us for a copy of these safeguards.
Your rights
You have the right to:
- access your data and get a copy of it;
- correct it;
- have it deleted;
- restrict how we process it;
- receive it in a portable format;
- object to processing based on our legitimate interest, including direct marketing;
- withdraw your consent at any time, without affecting what we did before you withdrew it.
The quickest way is our Data Control Panel, where you can ask for a copy of your data or for its deletion. You can also write to [email protected]. We reply within one month. You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
Cookies and similar technologies
- Necessary: we save your cookie choice in your browser's local storage, and Cloudflare may set cookies that protect the site from bots. These do not need consent.
- Analytics: Google Analytics cookies, set only after you accept them.
To change your choice, use Cookie Settings in the footer. You can also delete cookies in your browser settings.
Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Answers in the chat are information, not decisions.
Security
We encrypt connections, give access to data only to people who need it, keep backups and test our systems. More in our Security Commitment.
Children
Our services are for businesses. We do not knowingly collect data from children under 16.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use data you have already given us, we will tell you by email or in your account.