Privacy Policy
How CloudTally collects, uses, retains, and protects personal data.
Last updated: 20 April 2026
1. Who we are
The data controller responsible for your personal data is:
Agapios sp. z o.o.
Milenijna 43/2, 03-130 Warszawa, Poland
VAT ID: PL5242975067
KRS: 0001041436 (Sąd Rejonowy dla m.st. Warszawy)
Managing director: Piotr Hajkowski
Email: [email protected]
We operate the CloudTally website at cloudtally.eu.
2. What data we collect and why
2.1 Waitlist and launch updates
When you join the CloudTally waitlist, we collect your email address. We also send the selected site locale, the current page path, and any utm_* campaign parameters present in the page URL at the time of submission.
We use your email address to send launch-related updates and manage your subscription to those updates.
We use locale, page path, and any submitted utm_* values to understand which pages and campaigns generate interest in CloudTally and to improve the marketing website.
Legal bases: Consent for launch-update emails (Art. 6(1)(a) GDPR). Legitimate interests in measuring signup sources and improving the website (Art. 6(1)(f) GDPR). You may withdraw your consent to launch-update emails at any time by unsubscribing via the link included in those emails.
2.2 Usage and log data
We collect server-side logs including IP addresses, request timestamps, and HTTP response codes for security monitoring and debugging. We do not use this data for profiling or marketing.
Legal basis: Legitimate interests in operating a secure and reliable website (Art. 6(1)(f) GDPR).
2.3 Communications
When you contact us by email, we retain the content of your message and your contact details to respond to you and track any follow-up.
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).
2.4 Website preferences
The marketing website stores your selected color theme in your browser's localStorage under the key theme so it can remember your light or dark mode preference.
The website does not store language preference in cookies or browser storage. Instead, the selected locale is reflected in the page URL.
We do not currently use analytics or advertising trackers on the marketing website.
Legal basis: Legitimate interests in providing a consistent and localized website experience (Art. 6(1)(f) GDPR).
3. Data recipients and third-party processors
We share your personal data with the following categories of recipients:
| Recipient | Role | Purpose | Country |
|---|---|---|---|
| Hetzner Online GmbH | Sub-processor | Web hosting and infrastructure | Germany |
| SEOHost | Sub-processor | Transactional email delivery | Poland |
We do not sell your personal data. We do not share your data with advertising networks.
4. Data retention
We retain your data for the following periods:
| Data type | Retention period |
|---|---|
Waitlist submission data (email, locale, page path, and any submitted utm_* values) | Until you unsubscribe |
| Server logs | 30 days |
| Support correspondence | 2 years |
After the applicable retention period, data is permanently deleted or anonymised.
5. International transfers
Your data is hosted on Hetzner Cloud infrastructure located in the European Union, including Germany and Finland. We do not transfer personal data outside the EEA.
6. Cookies
Our marketing website (cloudtally.eu) does not use tracking or advertising cookies and does not currently use analytics cookies.
To remember your theme choice, the website stores a theme value in your browser's localStorage. Language selection is reflected in the URL path rather than stored in cookies or browser storage.
For more detail, see our Cookie Statement.
7. Your rights under GDPR
As a data subject under GDPR, you have the following rights:
- Right of access (Art. 15): request a copy of the personal data we hold about you
- Right to rectification (Art. 16): request correction of inaccurate data
- Right to erasure (Art. 17): request deletion of your data, subject to legal retention obligations
- Right to restriction (Art. 18): request that we restrict processing of your data
- Right to data portability (Art. 20): receive your data in a machine-readable format
- Right to object (Art. 21): object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. As our company is established in Poland, you may also contact the Urząd Ochrony Danych Osobowych (UODO), uodo.gov.pl.
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including TLS encryption in transit and access controls. No method of transmission or storage is 100% secure; we will notify you of any breach affecting your data as required by GDPR Art. 33-34.
9. Children
The website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. The current version is always available at cloudtally.eu/privacy, and we will update the effective date above when we make changes.
If a change materially affects how we process personal data and we have your email address, we may also notify you by email before the updated version takes effect.
11. Contact
For any questions about this privacy policy or your personal data, contact:
Agapios sp. z o.o.
Milenijna 43/2, 03-130 Warszawa, Poland
[email protected]