Beaglio privacy policy

Version of 25 September 2026.

1. Controller

The controller of personal data in the Beaglio service (beaglio.com) is Bartosz Kuć, running a sole proprietorship in Poland (tax ID NIP 7393933151). Contact for all data protection matters: info@beaglio.com.

2. What data we process

Beaglio sends alerts about new and amended legal acts from official sources (including ELI/ISAP — the Polish Journal of Laws and Monitor Polski, EUR-Lex, recht.bund.de and Légifrance). We query these sources without any of your data. We process:

• your email address;
• your watches — country, type (domain or act), phrase or act, and your label; digest frequency (daily or weekly); your plan;
• proof of consent — the date and IP address of the confirmation of your email address and of each later watch request, together with the content of the request;
• technical data — hashes of confirmation tokens and access codes; the token of your panel and unsubscribe link; a delivery log (subscriber and watch IDs, channel, message ID, status, date — without your email address); an abuse-prevention counter for confirmation emails (email address and day); a list of addresses excluded from sending (address, reason, date);
• access code (if you use one) — the code hash, plan and an administrator note on whom the code was given to;
• correspondence, if you write to info@beaglio.com (for example to request a paid plan).

In your browser we store only your language choice (localStorage). We use no cookies and no analytics or advertising scripts, and the site loads no resources from other servers. Our infrastructure provider, Cloudflare, records technical request data (IP address, browser, country, time, page address) and makes it available to us as statistics for 31 days.

3. Purposes and legal bases

• Providing the service — sign-up, confirmation, watches, sending alerts and the panel: Art. 6(1)(b) GDPR (a service you requested). Confirming your sign-up by clicking the link in our email (double opt-in) is also your consent to receive email notifications from us (Art. 398 of the Polish Electronic Communications Law). You can withdraw it at any time, which ends the service.
• Proof of consent, suppression list, abuse prevention, traffic statistics — Art. 6(1)(f) GDPR (accountability, security, respecting your unsubscribe).
• Correspondence — Art. 6(1)(f) GDPR (replying to you), and for paid plan requests Art. 6(1)(b) (steps prior to entering into a contract).

Providing your email address is voluntary, but we cannot send alerts without it. We make no decisions based solely on automated processing and do not profile you. The only automated steps are matching new acts against your watches and sending digests.

4. Recipients

The following providers process data on our behalf, under data processing agreements:

• Cloudflare, Inc. — hosting, server functions, database, forwarding of info@beaglio.com, traffic statistics;
• Brevo (Sendinblue SAS, France) — email delivery;
• Google (Google Workspace) — the mailbox that receives correspondence sent to info@beaglio.com.

We do not sell your data or share it with anyone for their own purposes.

5. Where we process data

The service database is stored in Cloudflare D1 with European Union jurisdiction — the database runs and stores data only in the EU. Traffic is handled by Cloudflare's global network and correspondence by Google, so data may also be processed outside the European Economic Area, on the basis of the adequacy decision (EU-US Data Privacy Framework) and/or standard contractual clauses (SCC).

6. How long we keep data

• email address, watches and settings — while you use the service. When you unsubscribe, we delete your watches and stop sending messages, and your address is added to the suppression list;
• unconfirmed sign-ups (an address that was never confirmed) — 7 days;
• unused confirmation links — until they expire (24 hours), then we delete them;
• delivery log — 12 months;
• confirmation counter — the current day only; older entries are deleted daily;
• proof of consent (address, date and IP address of confirmations) — 3 years after you unsubscribe, then we delete it;
• suppression list — for as long as we provide the service, so that we never email you again after you unsubscribe. Exception: if your address is entered in the sign-up form again, we send it an email asking for confirmation (at most one a day) — only confirming it resumes the alerts;
• correspondence — 3 years after the matter is closed; enquiries that did not lead to cooperation — 12 months from the last contact;
• Cloudflare traffic statistics — 31 days.

At your request we will delete other data earlier, unless we must keep it for the reasons above.

7. Your rights

You have the right to access your data and obtain a copy, to rectification, erasure, restriction of processing, to object, to data portability and to withdraw consent at any time (without affecting the lawfulness of earlier processing). Write to info@beaglio.com — we will reply without undue delay and within one month at the latest. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, Poland), or with the supervisory authority in your EU country of residence.

8. Changes

We publish every change on this page with its date and a description.

• 25 September 2026 — first version of this policy.