privacy policy

what we process when you join the waitlist, why, and your rights

This page covers the Clixad waitlist website only. When the product launches, the CLI and the account system will process further data, such as your GitHub identity and usage metering. This policy will be extended before then.

1. controller

Florian Rappold
Maikäferstraße 3f
85551 Kirchheim bei München, Germany
Phone: +49 151 61893139
Email: info@velyr.io

2. what we process

• Your email address, only the address you type into the waitlist form.
• Technical server data. When you open this site our hosting provider processes data such as your IP address, the requested page, timestamp, referrer and browser identifier. This is standard web server logging, needed to deliver and secure the site.
• Aggregate visit statistics. We use Vercel Web Analytics to count page views and referrers. It sets no cookies and stores nothing on your device. Instead Vercel derives a pseudonymous visitor identifier by hashing incoming request data (such as IP address, browser identifier and requested page). That identifier is rotated at least daily, so you cannot be recognised across days or across other websites. We only ever see aggregate counts, never individual visitors.

We use no cookies, no cross-site tracking and no advertising pixels on this site, and we do not build profiles of visitors.

3. purpose and legal basis

• Waitlist email: to notify you once when Clixad becomes available. Legal basis: your consent, Art. 6 (1) (a) GDPR, given by submitting the form.
• Server data: to operate the site securely and stably. Legal basis: our legitimate interest, Art. 6 (1) (f) GDPR.
• Visit statistics: to understand how many people reach the site and where they come from, so we can improve it. Legal basis: our legitimate interest in a needs-based design of our website, Art. 6 (1) (f) GDPR. Because no information is stored on or read from your device, this does not require consent under § 25 TTDSG.

4. processors and hosting

We use the following service providers, each under a data processing agreement:

• Vercel Inc. for hosting and delivery of this website, and for the aggregate visit statistics described above.
• Supabase for the database that stores waitlist email addresses (EU region, Ireland).

Where a provider processes data outside the EU or EEA, the transfer is safeguarded by the European Commission's standard contractual clauses.

5. how long we keep it

We keep your email address until Clixad launches and you have been notified, or until you ask us to delete it, whichever comes first. You can request deletion at any time and we will remove the address without undue delay. Server logs are deleted or anonymised by our hosting provider after a short retention period.

6. sharing

We do not sell your data and we do not pass it to third parties for their own purposes. It is only processed by the providers listed above, strictly on our behalf.

7. your rights

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw your consent at any time, with effect for the future (Art. 7 (3))

To exercise any of these, email info@velyr.io. No particular form is required. You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work, or the place of the alleged infringement.

8. changes to this policy

We will update this policy when the service changes, for example when the Clixad CLI and accounts launch. The current version always applies and is published on this page.