Privacy Policy
Last updated: June 2, 2026
Derave Software sp. z o.o. (“we”, “us”, “our”), ul. Fryderyka Chopina 41/2, 20-023 Lublin, Poland (NIP: 712 340 66 31) is the data controller for personal data processed through this website.
Contact for data protection matters: contact@deravesoftware.com
What data we collect
Data you provide
When you submit the contact form we collect: name or company name, phone number, email address, and the subject of your enquiry.
Data collected automatically
When you visit the website we collect anonymous usage data via PostHog analytics: pages visited, navigation path, browser type, device type, and approximate country. IP address collection is disabled — we do not collect or store your IP address.
No cookies are set for analytics or marketing purposes. Cloudflare (our hosting provider) may set strictly necessary security cookies (e.g. __cf_bm) as part of its infrastructure. These do not require your consent.
Why we process your data
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry | Art. 6(1)(b) GDPR — pre-contractual measures at your request |
| Website analytics | Art. 6(1)(f) GDPR — legitimate interests (improving our services) |
| Hosting and security | Art. 6(1)(f) GDPR — legitimate interests |
Data processors
Formspree Inc. (United States) processes contact form submissions on our behalf. Data is stored on Formspree’s servers for 30 days before automatic deletion. Formspree operates under its own privacy policy. We currently use Formspree’s free plan, which does not include a formal Data Processing Agreement (DPA); we intend to formalise this as we scale.
PostHog Inc. provides website analytics. We use PostHog’s EU cloud (eu.i.posthog.com); all analytics data is stored within the European Union. Analytics run without cookies and without IP address collection. PostHog’s privacy policy applies.
Cloudflare Inc. (United States) provides website hosting and content delivery. Cloudflare processes request metadata as infrastructure. Transfers to the US are covered by Standard Contractual Clauses (SCCs).
How long we keep your data
Contact enquiries received by email are retained for no longer than 24 months from the date of last contact. We review and delete expired records annually. If a business relationship develops, we retain relevant correspondence for the duration of that relationship and as required by applicable law (e.g. accounting obligations).
Formspree deletes form submissions from its servers automatically after 30 days.
PostHog retains analytics data for 1 year.
International data transfers
PostHog processes all data within the EU — no transfer outside the EEA takes place.
Cloudflare (US) transfers are covered by Standard Contractual Clauses.
Formspree (US) processes data under its own terms. No formal SCCs or DPA are in place at this time (see note under Data processors above).
Cookies
We do not use cookies for analytics or marketing. Cloudflare may set strictly necessary infrastructure cookies as part of website delivery. These cookies are exempt from consent requirements under applicable law.
Your rights
Under GDPR you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
To exercise any of these rights, contact us at contact@deravesoftware.com. We will respond within 30 days.
You also have the right to lodge a complaint with the supervisory authority:
Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warszawa, Poland www.uodo.gov.pl
Updates to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision.
Contact
Derave Software sp. z o.o. ul. Fryderyka Chopina 41/2 20-023 Lublin, Poland contact@deravesoftware.com