Draft. This page is a draft awaiting legal review and is not yet in force.

Privacy notice (N84 Grid)

DRAFT for legal review. Not in force until approved. Last edited 21 October 2026.

Controller

N84 Labs (Kalvis Berzins, sole trader), Level One, Basecamp Liverpool, 49 Jamaica Street, Liverpool L1 0AH, United Kingdom. ICO registration number shown in the site footer. Contact: data@n84.dev.

What we collect

  • Your email address, to sign you in by emailed link and to send the alerts you set up.
  • Account records: your organisation (from your email domain), your role, your watchlist, your alert settings, API keys (we store only a fingerprint of each key) and API usage counts.
  • Sessions: a session record with the browser's user agent and an approximate location (city and country from Cloudflare), so you can see where you are signed in.
  • Product analytics: events such as "signed in", "added a watch" or "viewed pricing", stored with your workspace id, your email domain, whether the domain is a free-mail domain, and a one-way fingerprint of your email (never the address itself).
  • Payments: when you buy a plan, Stripe collects your payment details. We receive the customer and subscription ids, the plan and the billing interval; we never see card numbers.
  • Invoice requests: when you ask for an invoice for a paid plan, your name, organisation, email address and purchase order number (if you give one). They are emailed to data@n84.dev, so our email provider Resend also holds a copy. We use them to send the invoice and set up your plan (contract) and keep them with our invoice records as long as tax law requires.
  • Corrections you send, with the email address you send them from.

The register data N84 Grid shows is about connection projects and companies. We do not collect or show personal data from the registers: names of private individuals are removed before storage.

Why we use it (lawful basis)

  • To provide the service you asked for: contract.
  • To keep the service secure, prevent abuse and measure which features are used: legitimate interests.
  • To keep accounting records: legal obligation.

We do not send marketing email without your consent and do not sell personal data.

Who processes it for us

  • Cloudflare (hosting, database, storage, email routing)
  • Resend (sending email)
  • Stripe (payments)

Each acts under a data processing agreement. Some processing may take place outside the UK under the safeguards those agreements provide.

How long we keep it

  • Sign-in links: deleted 1 day after they expire.
  • Ended sessions: 90 days.
  • Account audit log: 12 months.
  • Closed workspaces: members, watchlists and settings deleted 30 days after closure.
  • Analytics events: 24 months.
  • Invoices and payment records: as long as tax law requires (Stripe keeps its own records).

Your rights

You can ask for a copy of your data, correction, deletion, restriction or to object, and you can complain to the Information Commissioner's Office (ico.org.uk). Email data@n84.dev; we reply within one month.