Privacy policy

Template. Every highlighted field in square brackets must be filled in, and the page reviewed by a lawyer, before launch.

Who is responsible

[Name of the controller], [address], [contact email]. Details are also in the imprint.

Purpose

We collect your email address to send you a confirmation message and, once Nod is ready, to tell you when your spot opens. If you answer the optional questions after confirming, we use your answers to understand who Nod is for and what it should do first.

Legal basis

Your consent: you tick the box next to the email field before you sign up. We store the time of your consent. Legal reference: [cite the applicable article, for example Art. 6(1)(a) GDPR].

Data we store

  • Email address, the time you consented, and your status (pending, confirmed, unsubscribed).
  • The time of confirmation and the time of the last confirmation email.
  • If you answer the optional questions: your role, the monthly price range you chose, and the free text you wrote.
  • A short source tag if you arrived through a link that contains one (for example from a message we sent you).
  • To limit abuse, a one-way hash of your IP address is kept as a counter for a short time. We do not store your IP address in clear text, and the counters are deleted after at most one day.

This site sets no cookies for visitors and uses no tracking or advertising tools. The password-protected admin area sets one strictly necessary session cookie for the operator.

Who processes data for us

  • Hosting: Vercel, [Vercel entity, address and server region]
  • Database: Supabase, [Supabase entity, address; project region]
  • Email delivery: Resend, [Resend entity, address; sending region]

Data processing agreements and, where data leaves the EU or EEA, the transfer mechanism: [describe the agreements and transfer mechanisms in place].

How long we keep it

[Retention period, for example: until you withdraw consent, or at most X months after launch]. Unconfirmed signups are deleted after [period for unconfirmed signups].

Your rights

  • You can withdraw your consent at any time with the unsubscribe link in every email or by writing to [contact email]. This does not affect what happened before.
  • You can ask for access to your data, correction, deletion and a copy of it.
  • You can complain to a data protection authority: [competent supervisory authority].