Privacy

What Firmwatch keeps about you, why, for how long, and how to erase it.

Version of 14 November 2026

Who is responsible

Bilal Ahmed Janjua, who runs Firmwatch, is the controller of your personal data. The contact details are at the top of this page.

What we keep

Your email address, your language, the companies and areas you follow, your plan and the date you last used Firmwatch. For each sign-in, the IP address and browser it came from, for security; they expire after 30 days or when you sign out. Copies of the emails we sent you, for 90 days. If you join the Pro waiting list: your address, the number of companies you gave and your language. The only cookie Firmwatch sets is your sign-in cookie.

Why, and on what basis

To sign you in and send the alerts and digests you asked for (performance of the contract). To protect the service from abuse, with the security check below (legitimate interest). To tell you once when Pro opens, if you joined the waiting list (at your request, before a contract). We send no advertising and sell no data.

Company data

Firmwatch shows legal entities only (companies, associations) from KBO Open Data of FPS Economy. Sole traders and directors are not included. KBO Open Data is never used for direct marketing.

Security check

The sign-in and waiting-list forms use Cloudflare Turnstile to check that a person sends them, not a program. For that check Cloudflare processes your IP address and technical details of your browser, as described in its Turnstile privacy addendum.

Counting visits

We count page views without a cookie or a script. PostHog (in the EU) receives only the page address and a code that changes every day; your IP address is neither passed on nor kept. If you have an account, we also count a few steps (signing up, a first company, opening an alert, taking Pro) under your account’s random number, without your email address.

Who processes the data for us

Cloudflare (hosting, the security check and the nightly backup), Neon (database, in Frankfurt, Germany), Resend (sending email), PostHog (visit statistics, in the EU) and, once Pro is on sale, Stripe (payments; Stripe holds your payment details, Firmwatch never sees them). Some are American companies; transfers outside the EU rely on the EU–US Data Privacy Framework or the EU standard contractual clauses in their data processing agreements.

How long

Until you delete your account, with one click in your settings; everything is then erased at once and a running subscription stops. The nightly backup keeps it 30 more days, then it is gone. If you do not use Firmwatch for eight weeks, your area digest pauses until you ask for it again. Waiting-list addresses are erased once we have told you Pro is open, or sooner if you ask. Invoices for a paid plan are kept by Stripe for as long as accounting law requires.

Your rights

You can ask to see, correct, erase or take away your data, to limit its use, or object to it: write to the address at the top of this page. You can also complain to the Belgian Data Protection Authority (www.dataprotectionauthority.be).