GDPR Compliance
Last updated: November 5, 2026
On this page
The short version
- For feedback collected on your site, you are the data controller and Bugfyx is the processor. For your account details, Bugfyx is the controller.
- The widget collects a screenshot, browser, screen size, page URL, the element's selector, console logs, the comment and, on paid plans, a short session replay. No tracking cookies or fingerprinting.
- Feedback is stored in EU-based infrastructure and encrypted in transit and at rest.
- Deleting a project removes its feedback within 30 days. Our Data Processing Agreement is published at bugfyx.com/dpa.
A summary for convenience only. The full text below is what applies.
bugfyx is committed to protecting your data and complying with the General Data Protection Regulation (GDPR). This page explains how we handle personal data.
1. Data Controller
When you use bugfyx as a customer (account holder), bugfyx acts as a data processor on your behalf. You remain the data controller for any feedback data collected through the widget on your website. bugfyx acts as data controller only for your account information (email, billing details).
2. What Data We Collect
Through the feedback widget, the following data may be collected from your website visitors:
- Screenshot of the current page view
- Browser name, version, and operating system
- Screen resolution and viewport size
- Current page URL
- CSS selector of the targeted element
- Page timings and console logs
- On plans that include it, a short session replay of the page (form inputs masked)
- Free-text feedback comment
- Optional: visitor name or email (if configured by site owner)
We do not set tracking cookies or fingerprint browsers through the feedback widget. Reporter IP addresses are used only transiently for rate limiting and abuse prevention.
3. Legal Basis for Processing
For account holders: We process your data based on contractual necessity (Art. 6(1)(b) GDPR) to provide the bugfyx service.
For website visitors: The legal basis is determined by you as the data controller. Most customers rely on legitimate interest (Art. 6(1)(f) GDPR) for collecting feedback to improve their website.
4. Data Storage & Security
- All data is encrypted in transit (TLS 1.2+) and at rest
- Feedback data is stored in EU-based infrastructure
- Screenshots are stored securely and accessible only to authorized team members
- We perform regular security audits
5. Data Retention
Feedback data is retained for as long as your account is active. When you delete a project, all associated feedback data (including screenshots) is permanently deleted within 30 days. When you delete your account, all data is permanently removed.
6. Your Rights
Under the GDPR, you have the right to:
- Access
- Request a copy of your personal data
- Rectification
- Correct inaccurate personal data
- Erasure
- Request deletion of your personal data
- Restriction
- Restrict processing of your data
- Portability
- Receive your data in a structured format
- Objection
- Object to processing based on legitimate interest
To exercise any of these rights, contact us at privacy@bugfyx.com.
7. Sub-processors
We use the following sub-processors to deliver the bugfyx service:
| Provider | Purpose | Location |
|---|---|---|
| Our hosting provider | Application servers and PostgreSQL database | EU |
| Cloudflare | File storage (R2), CDN, website hosting, bot protection | Global |
| Amazon Web Services | Widget script delivery (CloudFront, S3) | Global |
| Brevo | Transactional and notification email | EU |
| Stripe | Payment processing | US / EU |
| Sign-in with Google; website analytics with consent | US | |
| Anthropic | AI-generated report titles | US |
| Slack, Trello | Only when the customer connects the integration | US |
8. Data Processing Agreement
Our Data Processing Agreement applies to all customers and forms part of our Terms of Service. If you need a countersigned copy for your records, contact us at privacy@bugfyx.com.
9. Contact
For any GDPR-related questions or requests, contact our data protection team:
Email: privacy@bugfyx.com
Data protection questions?
Write to our data protection team.