Privacy Policy
Status: Pre-launch draft — placeholder content, to be finalized with legal counsel before launch.
Data controller
EquiOS, Musterstraße 123, 12345 Musterstadt, DE, hello@equiplan.example is the controller responsible for the processing of your personal data described below.
Data we collect
Waitlist signup: when you join the waitlist, we collect your email address, role (owner-operator / facility manager / other), stable size band, and country.
Contact form: when you send us a message, we collect your name, email address, and message content.
Bot protection: waitlist signups are protected by Google reCAPTCHA v3, which analyzes technical signals (e.g. IP address, browser behavior) to distinguish humans from bots.
Analytics: if you consent via our cookie banner, we collect anonymized usage data about how you interact with our site.
Purpose and legal basis
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Prioritizing early-access invitations and sending waitlist updates | (b) performance of a contract / pre-contractual measures taken at your request |
| Responding to contact form inquiries | (b) performance of a contract / pre-contractual measures, or (f) legitimate interest in handling inquiries |
| Bot and abuse prevention (reCAPTCHA) | (f) legitimate interest in protecting our service from automated abuse |
| Website analytics | (a) your consent, given via the cookie banner |
Recipients / third-party processors
- Clerk — processes waitlist signups on our behalf.
- n8n (self-hosted or managed workflow automation) — receives waitlist and contact form submissions to route them to our team.
- Google reCAPTCHA — processes technical signals to protect the waitlist form from automated abuse.
- PostHog — processes anonymized analytics data, only after you grant consent via our cookie banner.
- Cookiebot — manages your cookie consent choices.
We have entered into, or will enter into, data processing agreements (Art. 28 GDPR) with each of these processors as applicable.
International data transfers
Some of our processors (including Google, and depending on hosting configuration, Clerk and PostHog) may process data outside the European Economic Area, in particular in the United States. Where this occurs, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 GDPR) or an applicable adequacy decision.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure of your data (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, without affecting processing carried out before withdrawal (Art. 7(3))
- Lodge a complaint with a supervisory authority (Art. 77) — in particular the data protection authority of your habitual residence, place of work, or the place of the alleged infringement
To exercise any of these rights, contact hello@equiplan.example.
Retention
- Waitlist data is retained until product launch plus a follow-up period of up to 12 months, or until you request deletion, whichever is earlier.
- Contact form messages are retained for as long as needed to handle your inquiry and for a reasonable period afterward for follow-up, generally no longer than 24 months.
Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. No transmission over the internet is entirely secure, and we cannot guarantee absolute security.
Changes to this policy
We may update this privacy policy from time to time. The current version is always available on this page.