Legal
Privacy policy
Last updated: 6 October 2026
1. Who we are
Latensy is operated by Creative Brackets AB, Hildedalsgatan 24, 417 05 Göteborg, Sweden (organisation number 559002-9624, VAT SE559002962401) (“Latensy”, “we”, “us”). We are the data controller for the personal data described in this policy. Contact: support@latensy.io.
2. What data we process
Account data
- Email address, password (stored hashed), optional full name, time zone, and optional phone number you add to your profile.
- Workspace membership, roles, and invitations you send to team members (their email addresses).
Monitoring configuration and results
- The services you configure: URLs, hostnames, ports, DNS records, keywords, request headers, and authentication details you choose to provide for authenticated checks.
- Check results: status, response time, status codes, TLS details, DNS values, error messages, and incident records derived from them.
- Alert channel details: email addresses, Slack webhook URLs, and webhook endpoints.
- Content you publish on status pages, including incident messages and uploaded logo URLs.
Billing data
- Your plan, subscription status, and invoices. Card details are collected and stored by Stripe, not by Latensy.
Technical data
- Server logs (IP address, user agent, requested URL, timestamp) for security and troubleshooting, retained for a limited period.
- Rate-limiting counters for public endpoints, keyed by IP address.
3. Why we process it and on what legal basis
- To provide the service (Art. 6(1)(b) GDPR): run your checks, detect incidents, send alerts, generate reports, and publish status pages you configure.
- To bill you (Art. 6(1)(b) and (c)): manage subscriptions and keep accounting records.
- To keep the service secure and reliable (Art. 6(1)(f)): logs, rate limiting, backups, and abuse prevention.
- To communicate with you (Art. 6(1)(b) and (f)): transactional emails such as alerts, confirmations, password resets, report emails you enabled, and billing notices.
We do not sell personal data and do not use it for advertising.
4. Processors and recipients
- Hosting: Hetzner Online GmbH (Gunzenhausen, Germany), data center in Nuremberg, Germany (EU).
- Payments: Stripe Payments Europe, Ltd. (Ireland), and its affiliates, for checkout, subscriptions, and invoices.
- Transactional email: Resend, Inc. (USA), for alerts, account emails, and report emails. Transfers are covered by standard contractual clauses.
- Alert destinations you configure: Slack or webhook endpoints receive the alert content you set up. Their processing is governed by their own terms.
- Live chat: Chatwoot, Inc. (USA), app.chatwoot.com, provides the chat widget on this website. Messages you send through it, and the browser identifier it stores to keep your conversation open, are processed by Chatwoot. Transfers are covered by standard contractual clauses.
- Website analytics: Ahrefs Pte. Ltd. (Singapore), analytics.ahrefs.com, measures pageviews and traffic sources on this website. It is cookieless and does not collect or store personal data such as IP addresses in an identifiable form.
5. Where data is stored
Latensy’s database and application servers are located in Germany. Some processors listed above operate outside the EU; where that is the case we rely on the safeguards noted.
6. How long we keep data
- Check results and incidents: for your plan’s retention period (30, 90, or 180 days, or as agreed on Enterprise), then deleted or aggregated.
- Account and configuration data: for as long as your account exists. When you delete a monitor, its history is deleted with it.
- Billing records: as required by applicable tax and accounting law.
- Server logs: 30 days, then deleted automatically.
7. Cookies
This website sets no advertising cookies and no analytics cookies: pageview analytics (Ahrefs Web Analytics) is cookieless and does not set any cookie or local storage identifier, and does not track you across websites. The live chat widget stores an identifier in your browser so your conversation can continue across pages; it is only tied to you if you start a chat. The application uses strictly necessary storage to keep you signed in.
8. Your rights
Under the GDPR you may request access to, rectification or erasure of, or restriction of processing of your personal data, object to processing based on legitimate interests, and request portability. You may also lodge a complaint with a supervisory authority; in Sweden this is the Swedish Authority for Privacy Protection (IMY). To exercise your rights, email support@latensy.io.
9. Security
Data is encrypted in transit. Customer data is isolated at the database level using row-level security. Backups are taken nightly with an off-site copy. See Security and data for details.
10. Changes
We will post changes to this policy on this page and update the date above. Material changes will be communicated by email to account holders.