Privacy Notice
This notice explains what personal data Driftro collects, why we collect it, and what you can ask us to do with it. We're a small Swedish company and we try to collect as little as we can.
Last updated:The short version
We only collect what we need to run Driftro and talk to you.
Website analytics (Google Analytics) only runs if you accept cookies.
We never sell your data or use it for advertising.
Our servers are in Stockholm, Sweden.
You can ask to see, fix, or delete your data at any time.
1. Who we are
Driftro AB is responsible.
Driftro AB, a company registered in Sweden, is the data controller for the personal data described in this notice. That covers visitors to driftro.se, people who contact us or book a demo, and people who log in to the Driftro app.
When our customers use Driftro to run their own status pages, they decide what data goes in, for example the email addresses of people who subscribe to updates. For that data the customer is the controller and we process it on their behalf. If you subscribed to a status page, the company running that page is the best place to start with questions.
Questions about privacy? Email privacy@driftro.se.
2. What we collect
The data we handle.
When you contact us or book a demo
Your name, work email, company, company size, phone number if you give it, and whatever you write in your message.
When you use the Driftro app
Your name and email address, which we get from Google when you sign in with your Google account. We also store the workspaces, monitors, status pages, and incidents you create, plus basic login session records so we can keep your account secure.
When you subscribe to a status page
Your email address and which updates you signed up for. We handle this on behalf of the company running the status page.
When you visit our website or app
Like any web server, ours record technical details such as your IP address, browser type, and the pages requested. We use these to keep the service running and secure. See our Cookie Statement for the small number of cookies we use.
If you accept analytics cookies on driftro.se
Google Analytics collects information about how you use our website: the pages you view, how you got here (for example from a search engine or a link), your device and browser type, and your approximate location, such as country or city. Google uses your IP address to work out that location but doesn't store it. We use this data as statistics and don't try to identify you.
3. Why we use it
Purposes and legal basis.
GDPR requires a legal basis for every use of personal data. Here's ours.
| Purpose | Legal basis |
|---|---|
| Providing your Driftro account and the service you signed up for | Performance of a contract |
| Answering your questions and demo requests | Legitimate interest in responding to people who reach out |
| Keeping Driftro secure and preventing abuse | Legitimate interest in protecting our service and users |
| Sending service emails, like incident notifications and security alerts | Performance of a contract |
| Understanding how visitors use our website, so we can improve it (Google Analytics) | Your consent, which you can withdraw at any time |
| Bookkeeping and invoicing | Legal obligation |
We don't sell personal data, we don't use it for advertising, and we don't make automated decisions about you that have legal or similarly significant effects.
4. Who we share it with
A short list of providers.
We use a few trusted providers to run Driftro. They can only use your data to do the job we hired them for.
| Provider | What they do | Location |
|---|---|---|
| UpCloud | Hosts our servers and database | Stockholm, Sweden |
| Backblaze | Stores encrypted database backups | EU |
| Brevo | Delivers service and notification emails | EU |
| Zoho | Our company email, for conversations with you | EU |
| Sign in with Google, and website analytics if you accept it | EU and USA |
Backups are encrypted on our own servers before they are sent to Backblaze. When data is transferred outside the EU/EEA, as can happen with Google sign-in and Google Analytics, we rely on safeguards approved under GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.
We may also share data if the law requires it, for example with authorities, or with a buyer if Driftro is ever sold. In that case we'd tell you first.
5. How long we keep it
No longer than we need to.
- Account data is kept while your account is active and deleted after you close it.
- Status page subscribers are kept until they unsubscribe or our customer removes them.
- Contact and demo requests are kept for up to 24 months after our last conversation.
- Website analytics data linked to your browser's cookie is deleted by Google after 2 months.
- Invoices and bookkeeping records are kept for 7 years, as Swedish accounting law requires.
- Backups roll over automatically, so deleted data disappears from them within about two months.
6. Your rights
You're in control.
Under GDPR you have the right to:
- get a copy of the personal data we hold about you
- have incorrect data corrected
- have your data deleted
- restrict or object to how we use your data
- receive your data in a portable format
- withdraw your consent to analytics at any time, through Cookie settings at the bottom of every page
Email privacy@driftro.se and we'll respond within one month. It's free.
If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se. We'd appreciate the chance to fix things first, though.
7. Changes
If this notice changes.
As Driftro grows we'll update this notice, and the date at the top will change. If a change affects how we use your data in a meaningful way, we'll let account holders know by email before it takes effect.