FlorisNexus
Rue D'Avondance 63
7110 La Louvière, Hainaut, Belgium
Email: privacy@continuumnexus.com
VAT: BE 1032.261.330
Legal Documents
Legal Center
Transparency and trust are at the core of our business. Read our policies to understand how we protect your data and serve you.
Privacy Policy
Last updated: September 15, 2026
1. Data Controller
2. Data We Collect
Account Information
Name, email address, company name, billing information. No password is ever collected or stored: signing in uses a single-use link sent by email, or GitHub.
Monitoring Configuration
URLs, request headers, authentication tokens, and request bodies you configure for monitoring
Monitoring Results
Response times, status codes, response headers, and response bodies from your monitored endpoints
Usage Data
IP addresses, browser type, pages visited, feature usage analytics
3. Legal Basis for Processing
- Contract Performance: Processing necessary to provide you with our services
- Legitimate Interest: Analytics, security, and service improvement
- Legal Obligation: Tax records, fraud prevention, law enforcement requests
- Consent: Marketing communications (opt-in only)
3 bis. Email we send you
We send three distinct kinds of email, and they are governed separately:
- Monitoring alerts the service itself. They are configured per monitor and are never sent for marketing purposes.
- Account emails: welcome, subscription confirmation, payment problems, quota notices. Necessary to perform the contract; they cannot be switched off while the account exists.
- Optional emails: the weekly digest, the onboarding sequence, and occasional re-engagement messages summarising what your monitoring did. These rest on our legitimate interest in keeping existing customers informed about the service they subscribed to.
Each optional family has its own switch in your account settings and a one-click unsubscribe link in every message. Turning any of them off never affects your monitoring alerts. We record delivery outcomes (delivered, bounced, marked as spam) to protect deliverability; an address that hard-bounces or reports spam stops receiving optional email permanently.
4. Data Hosting & Security
All data is hosted on Microsoft Azure in the West Europe (Netherlands) region. Our security measures include:
- Encryption at rest (AES-256) and in transit (TLS 1.3)
- Network isolation and firewall protection
- Regular security audits and penetration testing
- Access logging and monitoring
- Role-based access control for employees
5. Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure | Cloud Infrastructure | EU (Netherlands) |
| GitHub, Inc. | Authentication (only if you sign in with GitHub) | US (EU-US Data Privacy Framework) |
| Stripe Payments Europe, Ltd. | Payment Processing | EU (Netherlands) |
6. Data Retention
- Account Data: Retained while account is active + 30 days after deletion
- Monitoring Results: According to your plan (7 days to 1 year)
- Billing Records: 7 years (legal requirement)
- Server Logs: 90 days
7. Your Rights (GDPR)
Under GDPR, you have the following rights:
Right of Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Request deletion of your data
Right to Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interest
Right to Restrict
Limit how we use your data
To exercise these rights, contact us at privacy@continuumnexus.com. We will respond within 30 days.
8. Data Protection Authority
You have the right to lodge a complaint with your local Data Protection Authority. For Belgium:
Autorité de protection des données
Rue de la Presse 35, 1000 Brussels
Website: www.autoriteprotectiondonnees.be