Privacy notice

Last updated: 2 October 2026. This notice covers the public website at logstrm.com and enquiries sent through its contact form or to sales@logstrm.com. Product telemetry processed in a customer deployment is handled under the applicable customer agreement and data processing terms.

Publication checklist: the highlighted operator, retention and transfer details must be completed and checked against actual provider settings before this notice is published as final.

Controller and contact

The controller is [REGISTERED JDG BUSINESS NAME, INCLUDING OWNER'S FULL NAME], a sole proprietor in Poland, doing business under the Logstrm product brand. Address: [BUSINESS ADDRESS REQUIRED FOR SERVICE PROVIDER DISCLOSURE]. NIP: [NIP]. Privacy contact: sales@logstrm.com. Logstrm is a product brand, not a separate legal entity. Further operator details appear in the website service regulations.

Data, purposes and legal bases

• Contact form: name, email address, optional company, topic and message. We use these details to respond, arrange a requested demonstration or pilot, and discuss the requirements you raise. Where you ask us to take steps before a possible contract, the legal basis is GDPR Article 6(1)(b); for other messages, it is our legitimate interest in responding to a request you initiated (Article 6(1)(f)). Providing name, email, topic and message is needed to handle the form request; without them we cannot respond through the form. Company is optional.
• Campaign labels: when the contact-page link contains utm_source, utm_medium or utm_campaign, these labels may accompany your submitted enquiry so we can understand which campaign prompted it. They are supplied by the link and are not verified traffic measurements. This form attribution does not use cookies or browser storage.
• Direct email: the sender address and the content and attachments you choose to send are processed to respond to the message, on the pre-contractual or legitimate-interest basis described above, depending on its subject.
• Website and API security: hosting and contact API providers process technical request data such as IP address, requested URL, browser information and request time to deliver the site, limit abuse and investigate faults. Our basis is legitimate interest in providing and securing the website. The contact API uses the connecting IP for rate limiting; it does not add that IP to the email sent to us.

We do not use enquiry data to send marketing newsletters. We do not make decisions about you solely by automated means that produce legal or similarly significant effects. Do not submit passwords, access tokens, special-category personal data or sensitive production information through the public form.

Recipients and providers

Cloudflare provides website delivery, hosting and the contact API. The API saves a processing copy of the enquiry in Cloudflare D1, configured with an EU jurisdiction, and uses Brevo to manage the contact and follow-up task. Pilot, demo, product and partnership enquiries also create a sales opportunity in Brevo. The API sends a notification through Brevo to the Logstrm sales mailbox; the mailbox provider and people handling enquiries can access it. Marketing pages also load Google Fonts and the Tailwind CDN to render fonts and page styling; those providers receive standard browser requests, including IP address, when the resources load. We use these resources to present the site, on our legitimate-interest basis in operating the requested web page. We disclose information to public authorities where required by law and may share relevant technical information to investigate abuse or protect our rights. We do not publish enquiries.

Retention

The form-processing copy in Cloudflare D1 is configured for deletion after 30 days by the processing schedule. This does not delete contact records or correspondence in Brevo or the mailbox.

Contact enquiries and related email correspondence are kept for [RETENTION PERIOD OR OBJECTIVE CRITERIA FOR ENQUIRIES AND MAILBOX COPIES]. Cloudflare and other provider logs are kept for [RETENTION PERIODS/CRITERIA FOR WEBSITE, API, SECURITY AND ERROR LOGS], subject to the providers' actual configuration and terms. We delete or anonymise data when no longer needed, except where retention is required to establish, exercise or defend legal claims. Please confirm these periods against actual mailbox, Brevo, Cloudflare and account settings before publication.

International transfers

Some providers may process data outside the European Economic Area. Before publication, confirm each provider's relevant processing locations and the transfer mechanism actually relied on (for example, an adequacy decision or appropriate safeguards), and provide a way to obtain a copy of the safeguards: [PROVIDERS, COUNTRIES, TRANSFER MECHANISMS AND HOW TO OBTAIN SAFEGUARDS]. Do not rely on this draft as confirmation that a transfer safeguard is in place.

Your rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction or portability, and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time; this does not affect processing already carried out. Contact sales@logstrm.com. You may also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or another competent supervisory authority. You provide the enquiry details directly; we do not obtain contact-form details from a separate source.

Cookies and external resources

The site code does not set first-party analytics or advertising cookies. Cloudflare may set security cookies depending on the request and account configuration. The site currently loads Google Fonts and Tailwind code from third-party hosts. See the cookie notice for details. The actual cookies and browser storage used by the deployed site must be checked periodically against the live configuration.

Changes

We update this notice when our processing changes and revise the date above. Where required, we will provide information about material changes directly or through the website.