This policy explains how we handle personal data on firecrux.com, in our forms and chat, and in Firecrux accounts: the panel, the Client Portal and Firecrux for WordPress. We wrote it in plain language. If anything is unclear, ask us.
Who is responsible for your data
The controller of your personal data is GREENLOGIC Sp. z o.o., ul. Podwale 1/99, 50-043 Wrocław, Poland, entered in the National Court Register (KRS) under number 0000602965, VAT ID PL8943073554. Firecrux is our product brand. In this policy, “we” means GREENLOGIC Sp. z o.o..
For anything about your data, write to [email protected] or use the form on our Data Protection Contact page.
Data we process for our clients
Our products, Firecrux X-Ray QC, Firecrux CDP, Firecrux Automation and Firecrux Digital Intelligence, often process data that belongs to our clients, for example customer profiles in a CDP or visitor logs of a client's website. Our client is then the controller and we act as its processor under a data processing agreement. Questions about that data go to the company that uses our product, and we help it answer them.
What we collect and why
When you visit firecrux.com
Our servers and our network provider record technical data: your IP address, browser, the page you open and the time. We use it to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). We keep these logs only as long as we need them for security and troubleshooting.
We measure how the site is used with Google Analytics, loaded through Google Tag Manager, but only after you accept cookies in our banner. Until then, analytics stays off. Legal basis: your consent (Art. 6(1)(a) GDPR). Google Analytics keeps this data for no longer than 14 months. You can change your choice at any time with Cookie Settings in the footer.
When you write to us
Our contact, inquiry and calculator forms ask for your name, email address, company and the details of your case; some also ask for a phone number, industry or website. We use them to reply and to prepare an offer. Legal basis: steps you ask for before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Art. 6(1)(f)). We keep inquiries until the limitation period for possible claims ends, which for business claims is 3 years (Art. 118 of the Polish Civil Code). If a contract follows, we keep them for as long as it lasts and until claims under it become time-barred.
When you use the chat
The chat on our site is an AI assistant. It answers from our website and documentation and passes your question to our team when needed. Your messages and the page you were on are processed by a provider of AI language models acting as our processor, and we store the conversation so our team can follow up. Please do not share sensitive data in the chat. Legal basis: our legitimate interest in answering your questions (Art. 6(1)(f) GDPR). We keep a conversation as long as we need it to answer you; if it turns into an inquiry, we keep it as described above.
Newsletter
If you subscribe, we use your email address to send product updates and new use cases. Legal basis: your consent (Art. 6(1)(a) GDPR). Every email has an unsubscribe link, and we keep your address until you unsubscribe.
Free website checks
When you check a website with our free tools, our servers fetch its public pages. We need only the address you enter, not data about you, and the request is logged like any other visit.
Firecrux accounts
If you have an account in the Firecrux panel, the Client Portal or Firecrux for WordPress, we process your name, email address, company, login details and a record of activity in your account. If you connect Google Search Console or Google Analytics, we read data about your website with the access you grant, and you can disconnect them at any time. Legal basis: our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in keeping accounts secure (Art. 6(1)(f)). We keep account data while the account is active. After it is closed, we delete it, except data the law requires us to keep and data we need until claims under our contract become time-barred.
Payments and invoices
Paid plans are billed through Stripe, which processes your card details; we do not see or store full card numbers. We keep invoices and accounting records for 5 years from the end of the calendar year in which the tax payment deadline passed, as Polish tax and accounting law requires (Art. 70 and Art. 86 of the Tax Ordinance Act and Art. 74 of the Accounting Act; Art. 6(1)(c) GDPR).
Job applications
If you send your CV to [email protected], we use it for the recruitment you apply for. Legal basis: steps before an employment contract (Art. 6(1)(b) GDPR) and your consent for anything beyond what the Labour Code requires (Art. 6(1)(a)). We delete applications when the recruitment ends, unless you agree that we keep yours for future recruitments; then we keep it until you withdraw that consent.
Our social media profiles
When you visit our Facebook or LinkedIn profile, the platform processes your data under its own privacy policy. For page statistics, we may be joint controllers with it.
Google user data
When you connect a Google account to Firecrux, in the panel or in Firecrux for WordPress, we access only what you agree to on Google's consent screen:
- your Google account email, to show which account is connected;
- Google Search Console data, read only: clicks, impressions, positions and index status of the sites you select;
- Google Analytics data, read only: traffic and engagement of the property you select;
- in the panel only, and only when you click it: Google Analytics settings (data retention, and registering the custom dimensions, metrics and key events your site already sends) and Google Tag Manager (an audit of the container you select and, on “Install GA4 base tag”, one GA4 tag added, a version created and published). Nothing is deleted and no other tag is changed.
Firecrux for WordPress asks only for the email, Search Console and Google Analytics, read only. We use this data only to provide the features you use: your dashboards, reports and plugin, the content and SEO recommendations you ask for, and the changes you ask us to make. You can disconnect Google at any time in Firecrux or in your Google Account.
AI processing of Google user data
Some features use AI models to turn your Search Console data into recommendations you ask for, for example suggested page titles and meta descriptions, ideas for new or updated articles, topic groups and internal link suggestions. For these features we send AI model providers only what the feature needs: Search Console search queries for your pages and, for some features, their aggregated clicks, impressions or average position. We do not send Google Analytics data, Google Tag Manager data or your Google account email to AI providers, and we do not build profiles of people from this data.
We use these AI model providers, each acting as our processor and called directly through its paid business API: Anthropic (Claude), OpenAI and Google (Gemini API). Under their business terms and our settings, they may not use the data we send to train or improve their models.
Firecrux does not use Google user data, whether raw, aggregated, anonymized or derived, to develop, improve or train generalized or non-personalized AI or machine learning models, and does not allow the providers above to do so. We do not train or fine-tune any AI model with Google user data. The results are used only to provide features to you.
Firecrux's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use the data only to provide these features. We do not transfer it to others, except as needed to provide them, to comply with the law, or in a merger or acquisition with notice to you. We do not use it for advertising. People do not read it unless you agree, it is needed for security, the law requires it, or the data is aggregated and anonymized.
Who we share data with
We do not sell your data. We share it only with providers who help us run our services, under data processing agreements, and with public authorities when the law requires it:
- hosting: Contabo GmbH (Germany) and LH.pl (Poland);
- network, security and content delivery: Cloudflare;
- file storage: Backblaze, in its European region;
- email, analytics and tag management: Google;
- payments: Stripe;
- AI language models: Anthropic, OpenAI and Google (Gemini API) for the chat and product features, and Perplexity and Replicate for features that do not use Google user data;
- search data: DataForSEO;
- accounting, legal and IT advisers bound by confidentiality.
Transfers outside the European Economic Area
Some providers, such as Google, Cloudflare, Stripe and AI model providers, may process data in the United States or other countries outside the EEA. We rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, or on the European Commission's standard contractual clauses. You can ask us for a copy of these safeguards.
Your rights
You have the right to:
- access your data and get a copy of it;
- correct it;
- have it deleted;
- restrict how we process it;
- receive it in a portable format;
- object to processing based on our legitimate interest, including direct marketing;
- withdraw your consent at any time, without affecting what we did before you withdrew it.
The quickest way is our Data Control Panel, where you can ask for a copy of your data or for its deletion. You can also write to [email protected]. We reply within one month. You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
Cookies and similar technologies
- Necessary: we save your cookie choice in your browser's local storage, and Cloudflare may set cookies that protect the site from bots. These do not need consent.
- Analytics: Google Analytics cookies, set only after you accept them.
To change your choice, use Cookie Settings in the footer. You can also delete cookies in your browser settings.
Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Answers in the chat are information, not decisions.
Security
We encrypt connections, give access to data only to people who need it, keep backups and test our systems. More in our Security Commitment.
Children
Our services are for businesses. We do not knowingly collect data from children under 16.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use data you have already given us, we will tell you by email or in your account.