Privacy Policy

1. Information Collection & Purpose

We collect basic personal information (such as your name and email address) and your IP address when you register for our private beta waitlist. Additionally, we gather non-identifiable technical browsing data (such as browser language preference) and website interaction metrics to optimize user experience.

Purpose: Your personal data is used solely to manage your place in the private beta waitlist, prevent duplicate or fraudulent registrations, and send you product updates or invitations to join the platform.

Legal basis: The processing of your data is based on your explicit consent, granted when registering for the waitlist.

Retention period: We will retain your data for the duration of the Beta phase and until you decide to unsubscribe.

2. Security Measures

Fixed implements reasonable technical, organizational, and legal measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure, including access controls to our databases and encryption of information in transit. In the event of any security incident affecting your personal data, Fixed will notify the National Authority for Personal Data Protection within the timeframes established by current regulations.

3. International Data Transfers

To operate this beta phase, we share limited data with trusted third-party service providers. By using our site, you explicitly consent to the international transfer of your data to these providers, which operate in the United States:

- Supabase (USA): Used as our primary secure cloud database to host registration records.

- Resend (USA): Used to deliver transactional email confirmations and product updates. Each email sent contains an automatic opt-out (unsubscribe) option.

- Google Analytics (USA): Processes anonymized navigation metrics and device information to help us measure site performance. No directly identifying personal details are sent to Google LLC.

- Vercel Inc. (USA): Used for website hosting and aggregate, anonymous traffic measurement (Vercel Web Analytics).

- Cloudflare Inc. (USA): Used via its Turnstile service to distinguish human traffic from automated traffic (bots) and protect the site against abuse. Turnstile processes technical browser signals (such as IP address and browser characteristics) solely for security purposes; Cloudflare declares that it does not use this information to identify or profile individuals.

4. Your ARCO Rights, Portability & Timeframes

You have the right to Exercise your rights of Access, Rectification, Cancellation, Opposition, and Portability regarding your personal data. The timeframes for addressing your requests are:

- Access: 20 business days.

- Rectification, Cancellation, Opposition, Portability, and Revocation of consent: 10 business days.

To exercise these rights, please contact our support channel at support@fixed.software.