Privacy policy

Who we are

ntail is operated by Factual Tech AB, a company registered in Sweden (registration number 559383-6439, VAT SE559383643901), registered address Bollmora Allé 9, 135 39 Tyresö, Sweden. See our imprint for full registration details.

This policy explains what personal data we collect, why, and the rights you have over it. It covers both the ntail marketing site and the ntail platform.

Two roles under GDPR

Depending on what the personal data is and who it belongs to, Factual Tech AB acts in one of two roles defined by the EU General Data Protection Regulation (GDPR):

• Controller for account, billing and contact data — the information you or your organisation give us to create an account, process payment, and respond to support or sales requests. We decide why and how that data is used, within this policy.
• Processor for any personal data our customers choose to send through their own ntail clusters — the records, events and messages a customer's own applications produce, consume and store on the platform. For that data, the customer is the controller, we act only on their instructions, and the terms are set out in our data processing addendum, not this policy.

Data we collect as a controller

When you use our website or become a customer, we collect:

• Account and contact data — name, work email, company name and anything else you give us when you contact us, request a quote, or set up an account.
• Billing data — invoicing details and payment records needed to bill you, processed by our payment provider on our behalf.
• Usage and diagnostic data — cluster-level metrics such as throughput, storage and connection counts, used for billing, capacity planning and support. This does not include the content of the records you send through your own clusters.

Cookies

This website uses cookies. We do not use third-party advertising trackers. Cookies fall into three categories:

• Necessary — required to run the site and to remember your cookie choice. Always on, no consent required.
• Functional — supports signed-in sessions and abuse-prevention (hCaptcha, used on the contact form) if and when those features are available. Always on, no consent required, for the same reason as Necessary: the site can't provide those features without them. See hCaptcha's privacy policy for how it processes this data.
• Analytics — Google Analytics (GA4, tag G-C9Q63TWNLL), used for basic, aggregated visit data for this website. Requires your consent; on only if you accept it. See Google's privacy policy for how Google processes this data.

You choose whether to allow Analytics the first time you visit, and can change your choice at any time via the "Cookie settings" link in the footer. Your choice is stored in a first-party cookie for 30 days if you accept Analytics, or 24 hours if you don't — so you're asked again sooner if you've opted out.

Why we process it

• To provide, bill for, and support the service (performance of a contract).
• To respond to sales and support enquiries (legitimate interest, or steps prior to a contract).
• To meet accounting, tax and other legal obligations (legal obligation).

Where your data is processed

ntail is a European company. By default, customer data and account data are processed and stored on infrastructure located in the EU. Where a customer explicitly requests a different region, or where we use a sub-processor located outside the EU, we rely on an appropriate GDPR transfer mechanism (such as Standard Contractual Clauses).

How long we keep it

Account and billing data is kept for as long as your account is active, and afterwards only as long as required by accounting and tax law. Usage and diagnostic data is kept for as long as needed for billing and support, and is aggregated or deleted after that. Data you send through your own clusters is retained on the schedule you configure, and deleted when you delete it or close your account.

Your rights

Under GDPR, you have the right to access, correct, delete, restrict or object to our processing of your personal data, and the right to data portability. To exercise any of these rights, contact us. You also have the right to lodge a complaint with your local data protection authority — for Sweden, the Integritetsskyddsmyndigheten (IMY).

Security

Data is encrypted in transit and at rest. See how we handle security for more detail on our approach, including our EU hosting and off-public-cloud options.

Changes to this policy

We will update this page if our practices change, and update the date at the top when we do. For material changes affecting existing customers, we will also reach out directly.

Contact

Questions about this policy or your data: info@ntail.io, or see our imprint for our full registered details.