GDPR Compliance
How Fyre Push complies with the General Data Protection Regulation
Our Commitment
Fyre Push is committed to protecting the privacy and data rights of all users, including those in the European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) in our data processing practices.
Lawful Basis for Processing
Consent
Push notification subscriptions are based on explicit user consent. Subscribers must actively opt-in through the browser's native permission dialog. No notifications are sent without clear consent.
Legitimate Interest
We process minimal analytics data (impressions, clicks) to provide our service. This data is anonymized and does not identify individual subscribers.
Contract
We process account holder data as necessary to fulfill our service agreement.
Data Subject Rights
Under GDPR, individuals have the following rights, which we fully support:
- Right of Access: Request a copy of all personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Restriction: Request that we limit processing of your data.
- Right to Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interest.
Data Processing
What We Collect
- Account data: Email, hashed password, website URLs
- Subscriber data: Push tokens, browser type, OS, country (IP not stored)
- Analytics: Notification delivery status, impressions, clicks (anonymized)
Data Minimization
We only collect data that is strictly necessary for providing our service. We do not collect names, addresses, or any identifying information from subscribers. IP addresses are used only for country detection and are never stored.
Data Retention
- Account data: Retained while account is active + 30 days after deletion
- Subscriber data: Retained while subscription is active
- Analytics data: Retained for 90 days, then automatically purged
International Data Transfers
Our infrastructure operates on a global edge network. Data is processed at the nearest edge location to the user. We implement appropriate safeguards for any data transfers outside the EEA.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours as required by GDPR Article 33.
Data Protection Officer
For any GDPR-related requests or concerns, contact our data protection team at privacy@fyre-push.com.
Exercising Your Rights
To exercise any of your data rights, please email privacy@fyre-push.com with your request. We will respond within 30 days as required by GDPR.