1. Where Your End-User Data Lives
You choose where the clickstream data from your websites or apps is stored. We never “own” it.
- Cloud Users with their own storage: We act as a stateless router, forwarding data immediately to your own storage (e.g., BigQuery or your own ClickHouse cluster). Data exists in our volatile memory only during transit.
- Cloud Users with a hosted database: If you choose to have us host the database (e.g., the Cloud Dashboard plan), we store your clickstream data on your behalf in a ClickHouse database in the EU, as your Data Processor.
- On-Premises Users: We have zero access to your infrastructure or data. You are the sole controller and processor.
We only collect data necessary to manage your account and provide the service:
- Account Information: Name, email, and company details provided during sign-up.
- Billing Data: Processed securely via Stripe; we do not store credit card numbers on our servers.
- Usage Metadata: Information on how you interact with our dashboard (e.g., login frequency, configuration changes) to improve the platform.
- To provide and maintain the d8a.tech routing service.
- To manage your subscription and process payments.
- To send essential system updates or security alerts.
- To comply with legal obligations under Dutch law.
4. How We Use d8a.tech (Our Own Website)
We believe in our product. We use the d8a.tech platform on our own website to collect clickstream analytics.
- The Goal: To understand how visitors use our site and improve the user experience.
- The Destination: This data is routed through our service and stored in our own secure, private data warehouse.
- Privacy: Like our customers, we treat this data with the highest level of confidentiality and do not sell it to third parties.
5. Sub-processors
The core d8a.tech data service (collection, processing and the hosted database) uses EU-only sub-processors; the current list is available on request. The partners below support our website and business operations and are not part of the core data service:
| Sub-processor | Purpose | Location |
|---|
| Vercel / AWS | Website Hosting | EU/Global |
| Stripe | Payment Processing | Global |
| Postmark | System Emails | US |
| Google Workspace | Internal operations (email, documents) | Global |
6. Data Security
- Encryption: All data in transit is protected by TLS 1.3 encryption.
- Isolation: Your configurations are logically isolated from other users.
- On-Premises: For self-hosted instances, security is entirely under your control.
7. Your Rights (GDPR)
Under the GDPR, you have the right to access, correct, or delete your account information.
Note on End-Users: If you use your own storage, we do not store your end-users’ data, so you must handle “Right to be Forgotten” requests within your own data warehouse. If we host the database for you, we help you fulfill these requests.
8. Data Retention
- Account Data: Retained for the duration of your active subscription.
- Deletion: Upon account cancellation, your configuration metadata is deleted within 30 days. Billing records are kept longer as required by Dutch tax law.
9. Governing Law
This Privacy Policy is governed by the laws of the Netherlands. Any disputes will be resolved in the courts of Amsterdam.
For any privacy-related inquiries or to exercise your data rights:
Email: legal@d8a.tech