Privacy Policy

effective date · 2026-06-15

This policy explains what personal data brival.co collects, why, who we share it with, and what rights you have over it. The short version: this is a static website with no accounts and no comment forms. We use privacy-friendly, cookieless analytics that collects no personal data, and we set no tracking cookies. The only place personal data enters is the contact form, and any email you send us.

1. Who We Are

This website is brival.co. It is owned and operated by Brival sp. z o.o., Jasnogórska 43 lok. 1, 42-217 Częstochowa, Poland, VAT: PL5732915919. Brival sp. z o.o. is the data controller for the personal data described in this policy, within the meaning of Regulation (EU) 2016/679 (GDPR). For privacy questions or to exercise your rights, contact us at contact@brival.co.

2. What Data We Collect

Browsing this site does not require you to provide any personal data, and there are no forms outside the contact page. We collect data in the following ways:

  • Contact form: when you send a message through the contact page, we receive your name, your email address, and whatever you write in the message. Along with the submission we also receive standard technical metadata: the referring page, your browser's user-agent string, and a timestamp.
  • Email: if you email us directly, we receive your email address and whatever you include in the message.
  • Newsletter: if you subscribe, we receive your email address along with the time and IP address of your opt-in and a label for where you signed up, used as a record of your consent.
  • Tools early access: if you request early access to one of our tools, we receive your email address and the tool's name, along with the time and IP address of your opt-in, used as a record of your consent.
  • Server and security data: like virtually all web hosts, our infrastructure processes standard request metadata such as IP addresses in server logs, for security, abuse prevention, and operating the service.
  • Aggregate analytics: we use Plausible Analytics, a privacy-friendly service that does not use cookies and does not collect personal data or cross-site identifiers. It gives us anonymous, aggregate counts of which pages are visited, nothing that identifies you.

We do not set advertising or analytics cookies, and we do not sell personal data.

3. Why We Process It, and on What Legal Basis

  • Contact form and replies: to respond to you and to prepare for the conversation you asked for. Submitting the form sends us your message and triggers a follow-up (described below). Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to people who contact us (Art. 6(1)(f) GDPR).
  • Email correspondence: to answer you and handle whatever the correspondence concerns. Legal basis: our legitimate interest in responding, or pre-contractual steps where the message concerns working together (Art. 6(1)(f) and (b) GDPR).
  • Newsletter: to send you the updates you asked for. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time using the unsubscribe link in every email, or by contacting us, without affecting messages already sent.
  • Tools early access: to respond to your request to try a tool and to send you its release announcement. Legal basis: steps taken at your request (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by contacting us, without affecting messages already sent.
  • Site security and abuse prevention: to keep the site available and block malicious traffic. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
  • Aggregate analytics: to understand which pages are useful. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR); no personal identifiers are collected, which is why this needs no cookie consent.

4. The Follow-Up to Your Message

When you submit the contact form, your message is routed through a workflow-automation service we use to handle inbound enquiries. That service may send you an AI-assisted follow-up: a short reply with a couple of qualifying questions and a link to book a call. This helps us respond quickly and figure out whether we are a fit before we take up your time. It does not make any decision about you that produces legal or similarly significant effects, and there is no solely-automated decision-making in the sense of Art. 22 GDPR. A person reviews where it goes from there. You can always reply to a human, or write to contact@brival.co instead.

5. Who We Share It With

We do not sell your data or share it for advertising. We use a small set of processors to run the site and handle enquiries, each bound by a data processing agreement:

  • Cloudflare, Inc. — hosting and content delivery. The site runs as a Cloudflare Worker, which also receives the contact-form submission and processes request metadata such as IP addresses for security and delivery. We also use Cloudflare Turnstile, a privacy-focused bot-protection challenge, on the contact form; it processes limited technical signals to tell humans from bots and does not use tracking cookies.
  • Workflow-automation provider — the service the contact form forwards to, which routes your enquiry to us.
  • Plausible Insights OÜ (Estonia) — privacy-friendly, cookieless aggregate analytics.
  • Email-delivery provider — the service we use to send the newsletter and handle tool early-access requests and keep a record of your subscription and consent.

Some of these processors are based outside the European Economic Area, or may transfer data outside it. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard recognized under the GDPR.

6. Cookies

We do not set cookies of our own, and there are no advertising or analytics cookies on this site. Our analytics provider (Plausible) is cookie-free. Cloudflare Turnstile, used on the contact form, does not use tracking cookies. Our hosting provider may set strictly necessary cookies needed to deliver the page or mitigate abuse.

7. How Long We Keep Your Data

We keep contact submissions and email correspondence for as long as the relationship they concern requires, and afterwards only as long as we are legally obliged to, for example for accounting or to establish or defend legal claims. Server logs are short-lived, typically days to weeks, then deleted. We do not retain personal data we have no reason to hold.

Newsletter subscriptions are kept for as long as you stay subscribed. When you unsubscribe we stop sending and remove your address, keeping only what we need as a record that consent was given and withdrawn.

Tools early-access requests are kept while we handle them and until the release announcement you signed up for is sent, or until you withdraw. Afterwards we remove your address, keeping only what we need as a record that consent was given.

8. Your Rights

Under the GDPR you have the right to access the personal data we hold about you, to receive a copy of it, to have it corrected, to have it erased, to restrict or object to its processing, to data portability, and to withdraw any consent you have given (withdrawing consent does not affect processing that already took place). To exercise any of these, email contact@brival.co and we will respond within the statutory deadline. Erasure does not cover data we are obliged to keep for administrative, legal, or security purposes. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO), uodo.gov.pl.

9. Security

We rely on reputable infrastructure providers and keep access to enquiry data limited to the people who need it. No online service is ever perfectly secure, but we take reasonable technical and organizational measures to protect the data we hold.

10. Changes to This Policy

If we add anything to the site that changes how personal data is handled, a new processor or a mailing list for example, we will update this policy first and change the effective date at the top.

11. Contact

Brival sp. z o.o., Jasnogórska 43 lok. 1, 42-217 Częstochowa, Poland, VAT: PL5732915919.
Email: contact@brival.co.