Privacy Policy

Introduction

At Underflow, we respect your privacy and are committed to protecting your personal information. This privacy policy explains what information we collect, how we use it, and your rights regarding your data.

We comply with the General Data Protection Regulation (GDPR) and Croatian data protection laws.

What Information We Collect

We collect the following types of information:

Information you provide

• Your email address when you contact us
• Any message or information you choose to send us

When you submit a contact form, your email address and message are transmitted to Slack (operated by Salesforce, Inc.) for internal notification purposes, so our team can respond to your inquiry promptly.

Analytics data (with your consent)

If you accept analytics cookies, we use Google Analytics to understand how visitors interact with our website. Google Analytics may collect:

• Pages you visit and how long you spend on them
• Your approximate geographic location (country/city level)
• Browser type, device type, and operating system
• Referral source (how you arrived at our website)

This data is processed by Google in accordance with their Privacy Policy. You can decline analytics cookies when prompted, and no analytics data will be collected.

Legal Basis for Processing

Under the GDPR (Article 6), we process your personal data based on the following legal grounds:

• Legitimate interest — processing contact form submissions to respond to your inquiry and discuss potential projects (Art. 6(1)(f))
• Consent — using Google Analytics cookies to understand how visitors interact with our website (Art. 6(1)(a))

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries
• Discuss potential projects or services
• Keep records of our communications
• Understand how visitors use our website so we can improve it (analytics data only, with your consent)

We will never sell, rent, or share your personal information with third parties for marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions — retained for up to 12 months after your last communication with us, then permanently deleted
• Analytics data — retained by Google Analytics for 14 months, in accordance with Google's default data retention settings
• Slack notifications — retained within our Slack workspace for as long as the workspace exists; messages may be deleted upon your request

You may request early deletion of your data at any time by contacting us at info@underflow.eu.

How We Protect Your Information

We take the security of your information seriously:

• Your data is stored securely using industry-standard practices
• Access to your information is restricted to authorized team members only
• Analytics data is processed by Google Analytics under their data processing terms and is not combined with your personal contact information
• Contact form data shared with Slack is transmitted securely and processed under Salesforce's data processing terms

Third-Party Services

We use the following third-party services to operate our website. These providers act as data processors on our behalf:

• Google Analytics — website usage analytics (only with your consent). See Google's Privacy Policy.
• Slack (Salesforce, Inc.) — your email address and message from the contact form are sent to our internal Slack workspace so we can respond quickly. See Slack's Privacy Policy.
• Supabase, Inc. — contact form submissions (email address and message) are stored in a PostgreSQL database hosted by Supabase. See Supabase's Privacy Policy.
• Vercel, Inc. — our website is hosted on Vercel's infrastructure, which may process server logs including IP addresses. See Vercel's Privacy Policy.

We do not sell or share your personal data with any other third parties.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of any inaccurate information
• Request deletion of your information
• Request restriction of processing of your information
• Request portability of your data in a structured, machine-readable format
• Object to how we process your information
• Withdraw your consent at any time
• Lodge a complaint with a supervisory authority

To exercise any of these rights, simply email us at info@underflow.eu.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

Contact Us

If you have any questions about how we handle your information, we're here to help: