Steps:

1. Set JMX environment variables before starting Kafka:

1. For Kubernetes/Strimzi, add to Kafka custom resource:

1. Restart Kafka brokers to apply changes

2. Verify JMX is accessible:

For AWS MSK (Managed Streaming for Kafka)

Requirement: Open Monitoring with Prometheus must be enabled

Steps:

1. Via AWS Console:

   • Navigate to Amazon MSK console

   • Select your cluster → "Edit monitoring"

   • Enable "Open monitoring with Prometheus"

   • Check "JMX Exporter"

   • Save changes

2. Via AWS CLI

Verification: MSK exposes metrics on port 11001 (JMX Exporter) after enabling

Note: Open Monitoring is offered at no additional cost for MSK clusters

Important Notes

• Network Access:

  • For self-managed Kafka: Ensure JMX port (9999) is accessible from Datadog agents within your network.

  • For AWS MSK: Ensure security group rules allow inbound traffic on port 11001 (JMX Exporter) from Datadog agent instances.

To create the ENCRYPTION_SECRET_KEY, run the following command:

Specify the existing secret in custom_values.yaml

Indicate that you are using an existing secret by adding the following lines to your custom_values.yaml file:

Final Configuration

After configuring the secret, your overall configuration should look like this:

Deploy

Aiven

Step 1: Create a Token

1. In Aiven console: Click on user information (top right) -> Tokens -> Generate token

2. Use the created credentials in the Superstream console.

Step 2: Creating a Kafka User

1. Make sure the Kafka user you are giving to Superstream has the ACLs appear below.

Other

Create a dedicated Kafka user for Superstream with the following ACLs

Add to your MCP configuration

Add to Cursor

Click "Connect" to complete the connection with Superstream.

Claude

Connect via Claude Web

• Please ensure you are on a Team, Enterprise, Pro, or Max plan, and that you are an account Owner

• Open Admin Settings → Connectors → Add Custom Connector

• Enter name "Superstream" and paste the server URL below

• Open Settings → Connectors

• Find and connect to "Superstream"

ChatGPT

Connect via ChatGPT Web

• Open Settings → Apps & Connectors

• Click on Advanced Settings

• Turn on Developer Mode

• Go back and click "Create" in the top right

• Type in the name "Superstream" and paste the server URL below

• Choose "OAuth" in the authentication dropdown

• Leave Client ID and Client Secret empty

Available Tools

• list_clusters

• get_cluster_details

• get_cluster_health

• get_cluster_optimization_settings_and_their_potential_savings

• get_cluster_autoscaling_policy

• test_cluster_connectivity

• get_cluster_savings

• get_cluster_metrics

• search_documentation

This gives your team visibility into drift and decay that typically go unnoticed until there's an outage.

🔧 Auto-Remediation

When enabled, Superstream doesn't just detect issues—it fixes them. Our automation engine applies safe remediations based on best practices, usage patterns, and your cluster-specific thresholds.

• Fixes misaligned configs (e.g., retention.ms, cleanup.policy)

• Resolves replication factor issues or ISR shrinkage

• Normalizes partition count and distribution

All remediations are logged and reversible. You can choose to run in observability-only mode first, and turn on automation gradually.

📦 Cluster Right-Sizing

Superstream evaluates broker resource usage (CPU, memory, disk, throughput) and matches it against your current infrastructure provisioning.

• Works with AWS MSK, and Aiven

• Recommends better instance types or plan tiers

• Flags over-provisioned and under-resourced setups

• automatically performs safe reconfiguration—including intelligent partition rebalancing—to align resources with actual workload demand

This helps you reduce cloud costs without compromising performance.

🧹 Idle Topics & Consumer Groups Cleanup

Clusters often accumulate unused topics and consumer groups over time. Superstream identifies those and can clean them up automatically (with protection rules, if needed).

• Detects topics with zero traffic or unassigned partitions

• Identifies idle consumer groups that haven’t polled in weeks

• Supports manual review or automated deletion

You can protect critical topics with exclusion rules to avoid accidental cleanup.

⚙️ Topic Configuration Policies

Superstream allows you to enforce organization-wide policies on how Kafka topics should be configured. This ensures consistency, prevents drift, and reduces risk across your entire environment.

• Define global rules for critical configs like retention.ms, retention.bytes, min.insync.replicas, replication.factor and more.

• Detects and auto-corrects drifted or non-compliant topic settings

• Supports environment- or team-specific policies using tags or naming conventions

• Automatically applies corrections or flags for manual approval depending on your automation settings

These policies help standardize Kafka usage across services and teams—whether you’re running dozens or thousands of topics.

In the Superstream console (under your user profile):

• Account ID – copy from console

• Activation Token – copy from console

• Agent Name – choose a unique name (max 32 chars, lowercase only). Allowed: a-z, 0-9, -, _ Not allowed: .

🐳 Deploy via Docker

Run the following command to download and start the Superstream agent via Docker Compose:

☸️ Deploy via Kubernetes

Superstream provides a Helm chart to deploy the agent.

1. Create and configure custom_values.yaml . Define required values like account ID, activation token, and agent name → View example.

2. Navigate to the directory containing your custom_values.yaml file and run:

Deployment verification:

📦 What Gets Deployed

Whether using Docker or Kubernetes, the Superstream agent setup includes the following components:

• superstream-data-plane Core service that connects to your Kafka clusters, collects metadata, and generates insights.

• superstream-auto-scaler (optional) Automatically scales AWS MSK and Aiven Kafka clusters when enabled.

• superstream-telegraf Monitors internal agent components for health and metrics.

• superstream-datadog (optional) Collects and exports Kafka JMX metrics to Datadog, providing deep visibility into broker, topic, and consumer performance.

Appendixes

Appendix A - Superstream Update

1. Retrieve the most recent version of the Superstream Helm chart

1. Make sure to use the same values:

1. Run the upgrade command:

Appendix B - Uninstall

Appendix C - Deploy Superstream Agent using labels, tolerations, nodeSelector and etc'

• To inject custom labels into all services deployed by Superstream, utilize the global.labels variable.

• To configure tolerations, nodeSelector, and affinity settings for each deployed service, the adjustments in the following example need to be done:

Appendix D - Deploy Superstream from local registry

• To deploy Superstream from local registry, override default values using global.image variable in custom.valuesfile:

Topic Metadata:

• List of Topics: Retrieve all available topics in the Kafka cluster.

• Topic Configuration: Access detailed configuration settings for each topic, such as retention policies, partition count, replication factor, activity events, connected CGs, and segment file settings.

• Partition Information: Details about each topic's partitions, including partition IDs and their current leaders.

• Replicas placements

• Payload samples: The component that consumes the payload is the deployed local agent, which runs within your premises and, after analyzing the payload structure (regardless of its contents), immediately dumps it.

Consumer Group Metadata:

• Consumer Group List: List of all consumer groups connected to the Kafka cluster.

• Consumer Group Offsets: Information about the offset position for each consumer group in each partition of a topic.

• Consumer Group State: Current state of consumer groups, like whether they are active or in a rebalance phase.

• Static membership

Broker Metadata:

• Broker IDs and Addresses: Information about each broker in the Kafka cluster, including their IDs and network addresses.

• Broker Configurations: Configuration details of each broker, like log file size limits, message size limits, and more.

• Broker Metrics and Health: Data about broker performance, such as CPU and memory usage, network I/O, and throughput metrics.

• Rack aware id

Cluster Metadata:

• Cluster ID: Unique identifier of the Kafka cluster.

• Controller Broker Info: Details about the current controller broker, which is responsible for maintaining the leader election for partitions.

Log Metadata:

• Log Size and Health: Information on the log size for each topic and partition, and details on log segment files.

Recent fixes:

• Autoscaler issues

• UI fixes

Thanks for using Superstream!

By adhering to these standards, Superstream is committed to maintaining high levels of security and privacy, instilling trust in its users and stakeholders regarding data handling and protection. More information can be found in our legal hub.

Please store the following images in your container registry:

Telegraf: As a versatile agent for collecting, processing, and writing metrics, Telegraf is pivotal in monitoring and observability.

• Helm version: 1.8.62

• Container:

  • docker.io/library/telegraf:1.36-alpine

Datadog: A powerful monitoring platform for collecting, and alerting on Kafka JMX metrics in real time.

• Helm version: 1.0.0

• Containers:

  • grc.io/datadoghq/agent:7.71.1-jmx

  • superstreamlabs/superstream-connection-config:latest

Superstream: The agent itself.

• Helm version: Releases

• Helm Chart URL: https://superstream-agent.k8s.superstream.ai/

• Containers:

  • superstreamlabs/superstream-data-plane-be:latest

  • superstreamlabs/superstream-kafka-auto-scaler:latest

To ensure that your private repositories use the correct Docker images, follow these steps to pull images from public repositories and tag them for your private repository. Below are command examples for the related Docker images you might use:

Telegraf (docker.io/library/telegraf:1.36-alpine):

Superstream Agent (superstreamlabs/superstream-data-plane-be:latest):

Superstream Autoscaller (superstreamlabs/superstream-kafka-auto-scaler:latest):

Superstream Connection Config (superstreamlabs/superstream-connection-config:latest):

Getting started

1. Download Helm Chart

Download the Superstream Helm chart from the official source as described above.

2. Publish to Private Environments

Once downloaded, publish the chart to your private Helm chart repositories. This step ensures that you maintain control over the versions and configurations of the chart used in your deployments.

Docker Image Names: You must change the Docker image names within the Helmfile to reflect those stored in your private Docker registries. This customization is crucial for ensuring that your deployments reference the correct resources within your secure environment:

3. Configure All Services to Use a Private Docker Repository and Private PullSecret

For easiness create/use custom_values.yaml file and add global.image section values, an example can be found here:

4. Deploy

To apply the Helmfile configurations and deploy your Kubernetes resources:

Apply Helmfile: Run the following command to apply the Helmfile configuration. This will sync your Helm releases to match the state declared in your helmfile.yaml:

• Official values.file with all abilities can be found here.

• Push these values.yaml files to your ArgoCD repository.

Deploy Application YAMLs:

Follow the examples below to deploy the application YAML files. Pay close attention to the comments provided for each:

Sync and Monitor Deployment:

• Once your values YAML files are pushed and the applications YAML are deployed, navigate to your ArgoCD dashboard.

• Find the application you just deployed and click the 'Sync' button to initiate the deployment process.

• Monitor the deployment status to ensure all components are successfully deployed and running.

By following these steps, you should be able to deploy and upgrade the Superstream Agent using ArgoCD successfully. If you have any questions or need further assistance, refer to the documentation or reach out to the support team.

Option 1: Create or Update Superstream Role

Be sure you’re signed in to the AWS Console with your default browser, then click here:

1. Enter required parameters (e.g., NodeGroupRoleArn).

2. Acknowledge IAM resource creation.

3. Click Create Stack or Update Stack (choose Update Stack if the Superstream IAM role already exists).

4. Confirm status: CREATE_COMPLETE or UPDATE_COMPLETE.

5. Click on "Resources," then select "SuperstreamAgentRole" to retrieve the IAM Role ARN. Use this ARN in the Superstream console.

Option 2: Create or Update Superstream User

Be sure you’re signed in to the AWS Console with your default browser, then :

1. Acknowledge IAM resource creation.

2. Click Create Stack or Update Stack (choose Update Stack if the Superstream IAM user already exists).

3. Confirm status: CREATE_COMPLETE or UPDATE_COMPLETE (appears on the left side of the screen).

• All client properties are now being collected and can be viewed. This feature will be useful for the next release, as it allows users to modify them manually or via Superstream suggestions. Note: A client library upgrade is required.

• Dashboard performance improvements and additional metrics

• New optimization: Check for uncompliant retention policies

• Auditing improvements

• New Java client library: 3.5.113

Recent fixes:

• Minor engine issues

• Error while switching compression algorithm

Thanks for using Superstream!

Recent fixes:

• Setting different enforced retention policies

• UI fixes

• Missing consumer params

Thanks for using Superstream!

• Navigate to Slack and log in to your workspace using your credentials.

Step 1: Fill in cluster details

Each vendor has a slightly different connection approach

Confluent Cloud / AWS MSK

Automatic cluster discovery will initiate once an API key is provided. Metrics will be collected via the vendor API.

Aiven

You'll need an API token, Kafka cluster connection details, and the project and service names.

Redpanda / Apache (Self-hosted)

No automatic cluster discovery. Each cluster should be added manually. To enable metric collection in Superstream, a JMX connection must also be configured.

To get Apache Kafka JMX port and token information, here are the key approaches:

Step 3: Verify that all discovered or added clusters are in a healthy state

When clusters are added or discovered, the system may surface warnings related to permissions or network connectivity. It’s recommended to resolve these promptly to ensure proper functionality.

To collect detailed Kafka JMX metrics, add the following rules section to the JMX Exporter YAML configuration. These patterns match Kafka server, network, controller, log, and Java metrics, and convert them into Prometheus-compatible metrics.

Include this full rules list in the configuration to ensure comprehensive metric coverage:

These rules should be added to the JMX Exporter YAML configuration to expose comprehensive metrics for the Kafka broker, controller, network, log, and JVM.

Step 2: Create a Cloud Resource Management Key

1. In Confluent Console: Top-right menu -> API Keys -> + Add API key

2. Select the Service account

3. Select Cloud Resource Management

4. Use the created key in the Superstream console

Step 3: Create a Cluster-level API key

1. In Confluent Console: Main menu -> Cluster -> API Keys -> + Add API key

2. If ACLs are enabled, please use the following:

For READ+WRITE (Superstream to perform actions)

For READ only (Superstream to analyze only)

1. Edit the cluster in the Superstream UI and enter the SASL credentials you created.

Overview

Superstream Clients works as a Java agent that intercepts Kafka producer creation and applies optimized configurations without requiring any code changes in your application. It dynamically retrieves optimization recommendations from Superstream and applies them based on impact analysis.

Supported Libraries

Works with any Java library that depends on kafka-clients, including:

• Apache Kafka Clients

• Spring Kafka

• Alpakka Kafka (Akka Kafka)

• Kafka Streams

• Kafka Connect

• Any custom wrapper around the Kafka Java client

Features

• Zero-code integration: No code changes required in your application

• Dynamic configuration: Applies optimized settings based on topic-specific recommendations

• Intelligent optimization: Identifies the most impactful topics to optimize

• Graceful fallback: Falls back to default settings if optimization fails

Java Version Compatibility

The library fully supports Java versions 11 through 21.

Producer Configuration Suggestion

When initializing your Kafka producers, please ensure you pass the configuration as a mutable object. The Superstream library needs to modify the producer configuration to apply optimizations.

✅ Fully Supported (Recommended):

❌ Not Fully Supported (Avoid if possible):

Spring Applications

Spring applications that use @Value annotations and Spring's configuration loading (like application.yml or application.properties) are fully supported. The Superstream library will be able to modify the configuration when it's loaded into a mutable Map or Properties object in your Spring configuration class.

Example of supported Spring configuration:

Pekko/Akka Kafka Applications

Pekko and Akka Kafka applications typically use immutable configuration maps internally, which prevents Superstream from applying optimizations. To enable Superstream optimizations with Pekko/Akka, you need to create the KafkaProducer manually with a mutable configuration.

✅ Superstream-optimized pattern:

❌ Native Pekko/Akka pattern (optimizations won't be applied):

Why This Matters

The Superstream library needs to modify your producer's configuration to apply optimizations based on your cluster's characteristics. This includes adjusting settings like compression, batch size, and other performance parameters. When the configuration is immutable, these optimizations cannot be applied.

Installation

Superstream package: https://central.sonatype.com/artifact/ai.superstream/superstream-clients-java/overview

Step 0: Add permissions

Any app that runs Superstream lib should be able to READ/WRITE/DESCRIBE from all topics with the prefix superstream.*

Step 1: Add Superstream Jar to your application

Download from GitHub https://github.com/superstreamlabs/superstream-clients-java/releases

Available also in Maven Central https://central.sonatype.com/artifact/ai.superstream/superstream-clients

Step 2: Add Environment Variables

Step 3: Instrument

Add Superstream Java agent to your application's startup command:

Docker Integration

When using Superstream Clients with containerized applications, include the agent in your Dockerfile:

Prerequisites

• Java 11 or higher

• Kafka cluster that is connected to the Superstream's console

• Read and write permissions to the superstream.* topics

Strech Inc. (collectively referred to as “Superstream,” “we,” “us” or “our” in this Privacy Policy) is the controller of Personal Data submitted in accordance with this Privacy Policy and is responsible for that Personal Data. We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPO at [email protected].

3. Types Of Data We Collect.

We do not collect Personal Data (besides full name and company for login purposes). We do collect anonymous data from you when you visit our site, when you send us information or communications, when you engage with us through online chat applications, when you download and use our Products, and when you register for white papers, web seminars, and other events hosted by us. "Personal Data" means data that identifies, relates to, describes, can be used to contact, or could reasonably be linked directly or indirectly to you, including, for example, identifiers such as your real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, or other similar identifiers; commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies; Internet or other electronic network activity information. "Anonymous Data" means data that is not associated with or linked to your Personal Data; Anonymous Data does not permit the identification of individual persons. We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data).

3.1 Personal Data You Provide to Us.

We collect Personal Data from you, such as your first and last name, e-mail and mailing addresses, professional title, and company name when you download and install the Products, create an account to log in to our network, engage with us through online chat applications, or sign-up for our newsletter or other marketing material (internet/electronic activity).

3.2 Personal Data Collected Via Cookies.

We also use Cookies (as defined below) and navigational data like Uniform Resource Locators (URL) to gather information regarding the date and time of your visit and the solutions and information for which you searched and which you viewed (Internet/electronic activity). Like most technology companies, we automatically gather this Personal Data and store it in log files each time you visit our website or access your account on our network. "Cookies" are small pieces of information that a website sends to your computer’s hard drive while you are viewing a web site. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our website. Persistent Cookies can be removed by following Internet browser help file directions. You may choose to refuse or disable Cookies via the settings on your browser, however, by doing so, some areas of our website may not work properly.

3.5 Personal Data That We Collect From You About Others.

If you decide to create an account for and invite a third party to join our network, we will collect your and the third party's names and e-mail addresses (identifiers) in order to send an e-mail and follow up with the third party. You or the third party may contact us at [email protected] to request the removal of this information from our database.

4. Use Of Your Data.

4.1 General Use.

Any Data you submit to us is only used to respond to your requests or to aid us in serving you better.

4.2 Creation of Anonymous Data.

We may create Anonymous Data records from collected data by excluding information (such as your name and IP address) that makes the data personally identifiable to you. We use this Anonymous Data to analyze request and usage patterns so that we may enhance the content of our Products and improve site navigation, and for marketing and analytics.

4.3 Feedback.

If you provide feedback on any of our Products or our website, we may use such feedback for any purpose, provided we will not associate such feedback with your Personal Data. We will collect any information contained in such communication and will treat the Personal Data in such communication in accordance with this Privacy Policy.

5. Disclosure Of Your Personal Data.

5.1 Disclosure to Affiliates.

We will never share your Personal Data with other companies for advertisements, ads, or affiliation. If another company acquires us or our assets, that company will possess the Personal Data collected by it and us and will assume the rights and obligations regarding your Personal Data as described in this Privacy Policy. We may also disclose your Personal Data to third parties in the event that we sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets.

5.2 Disclosure to Third Party Service Providers.

Superstream does not and will not sell any data or metadata collected. Except as otherwise stated in this policy, we do not share the Personal Data that we collect with other entities. However, we may share your Personal Data -- including each category of Personal Data described above -- with third party service providers to: (a) provide you with the Products that we offer you through our website; (b) process payments; (c) conduct quality assurance testing; (d) facilitate creation and maintenance of accounts; (e) collect and analyze data; (f) provide technical support; or (g) provide specific business services, such as synchronization with other software applications and marketing services. These third party service providers are required by written agreement not to retain, use, or disclose your Personal Data other than to provide the services requested by us.

5.3 Disclosure to Other Third Party Companies.

We will not disclose your Personal Data to other Third Party Companies except as otherwise stated in this policy.

5.4 Other Disclosures.

Regardless of any choices you make regarding your Personal Data (as described below), we may disclose Personal Data if we believe in good faith that such disclosure is necessary to (a) comply with relevant laws or to respond to subpoenas or warrants served on us; (b) protect or defend our rights or property or the rights or property of users of the Products; or (c) protect against fraud and reduce credit risk.

6. Your Choices Regarding Your Personal Data.

We offer you choices regarding the collection, use, and sharing of your Personal Data. We will periodically send you free newsletters and e-mails that directly promote the use of our site or the purchase of our Products. When you receive newsletters or promotional communications from us, you may indicate a preference to stop receiving further communications from us and you will have the opportunity to "opt-out" by following the unsubscribe instructions provided in the e-mail you receive or by contacting us directly (please see contact information above). Despite your indicated e-mail preferences, we may send you notices of any updates to our Privacy Policy.

7. Your Legal Rights regarding your Personal Data.

Under certain circumstances, you may have rights under applicable data protection laws in relation to your Personal Data.

Where applicable, you may have the right to:

Request information about how we collect, process, use and share your Personal Data (commonly known as a “right to know request”).

Request access to your Personal Data (commonly known as a “data subject access request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.

Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your Personal Data (commonly known as a “request to be forgotten”). This enables you to ask us to delete or remove Personal Data. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply in full with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your Personal Data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the above rights please contact [email protected]. You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights), and Superstream does not discriminate based on whether you choose to exercise your choice and rights. We will not, based on your exercise of rights, deny our Products to you, charge you different rates, provide a different level or quality of Products to you, or suggest that you may receive such different treatment. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

Alternatively, we may refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights).

This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. As part of the verification process, we match the information submitted as part of your request against information stored by Superstream. In some instances, we will require additional information in order to verify your request. If an authorized third party makes a data subject request on your behalf, we will require sufficient written proof that you have designated them as your authorized agent. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

You also have the right to lodge a complaint with a data protection authority if you consider that the processing of your personal information infringes applicable law. If you have any questions, concerns or complaints regarding our compliance with this notice and applicable data protection laws, we encourage you to first contact our Data Protection Officer. We will investigate and attempt to resolve complaints and disputes and will make every reasonable effort to honour your wish to exercise your rights as quickly as possible and in any event, within the timescales provided by data protection laws.

9. Data Retention.

We will only retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

10. Dispute Resolution.

If you believe that we have not adhered to this Privacy Policy, please contact us by e-mail at [email protected]. We will do our best to address your concerns. If you feel that your complaint has been addressed incompletely, we invite you to let us know for further investigation. If we are unable to reach a resolution to the dispute, we will settle the dispute exclusively under the rules of the American Arbitration Association.

11. Changes To This Privacy Policy.

This Privacy Policy is subject to occasional revision, and if we make any substantial changes in the way we use your Personal Data, we will notify you by sending you an e-mail to the last e-mail address you provided to us or by prominently posting notice of the changes on our website. Any material changes to this Privacy Policy will be effective upon the earlier of thirty (30) calendar days following our dispatch of an e-mail notice to you or thirty (30) calendar days following our posting of notice of the changes on our site. These changes will be effective immediately for new users of our website and Products. Please note that at all times you are responsible for updating your Personal Data to provide us with your most current e-mail address. In the event that the last e-mail address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the e-mail containing such notice will nonetheless constitute effective notice of the changes described in the notice. In any event, changes to this Privacy Policy may affect our use of Personal Data that you provided us prior to our notification to you of the changes. If you do not wish to permit changes in our use of your Personal Data, you must notify us prior to the effective date of the changes that you wish to deactivate your account with us. Continued use of our website or Products, following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.

12. Transfers of Personal Data outside the EEA.

Your personal information may be transferred and stored in countries outside the EEA that are subject to different standards of data protection. Superstream takes appropriate steps to ensure that transfers of personal information are in accordance with applicable law and carefully managed to protect your privacy rights and interests, including through the use of standard contractual clauses and our certifications to the EU-US Data Privacy Framework (“DPF”), the UK Extension to the EU-US DPF, and the Swiss-US DPF. Additionally, Superstream uses a limited number of third-party service providers to assist us in providing our services to customers. These third parties may access, process, or store Personal Data in the course of providing their services. Superstream obtains contractual commitments from them to protect your Personal Data.

13. Accessibility.

We are committed to making our products and services accessible to everyone. If you need help with your accessibility-related requests and other servicing needs please contact us at [email protected].