Privacy Policy

The controller of your personal data is Quivin.ai. You can contact us about privacy at team@quivin.ai.

We have not appointed a Data Protection Officer, as we are not currently required to do so under Article 37 GDPR.

We collect only the data needed to run the waitlist:

• Email address, when you submit it through the waitlist form.
• Technical data that our hosting provider records automatically when you load the site, such as IP address, browser type, device information, pages requested and the time of each request.

We do not ask for names, phone numbers, company details, payment information or any other personal data, and we do not collect sensitive personal information as defined by US law or special category data under GDPR.

• Adding you to the waitlist and sending you the confirmation email: we process your email address because you asked us to (GDPR Art. 6(1)(a) consent, given by submitting the form, and Art. 6(1)(b) where processing is needed to take steps at your request).
• Updates about Quivin's launch: we send these only to people on the waitlist, based on your consent. You can withdraw consent at any time (see section 9).
• Keeping the website secure and reliable: technical data is processed under our legitimate interest in protecting the service from abuse and diagnosing errors (GDPR Art. 6(1)(f)).
• Showing the waitlist size: the number shown on the homepage is an aggregate count and does not reveal anyone's identity.

We do not use your data for profiling, automated decision-making or advertising.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We use the following service providers (processors) only to operate the website and waitlist, and only on our instructions:

• Resend (Resend, Inc.): stores waitlist contacts and delivers the confirmation and launch emails.
• Microsoft Azure (Microsoft Corporation): hosts the website and processes technical data.

We may also disclose data if required by law, a court order or a valid legal request, or to protect the rights, safety or property of Quivin, our users or others.

Our providers may process data outside the European Economic Area, the UK and Switzerland, including in the United States. Where this happens, we rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework (and its UK and Swiss equivalents) to protect your data. You can request a copy of the relevant safeguards by contacting us.

• Waitlist email addresses are kept until you unsubscribe, ask us to delete them, or we no longer run the waitlist, whichever comes first.
• Hosting logs are kept for [retention period, e.g. 30 days] and then deleted.

Once data is no longer needed, we delete it or anonymise it.

Quivin does not use analytics, advertising or social-media tracking tools, and does not place marketing cookies. Our hosting infrastructure may set strictly necessary cookies (for example, to keep requests routed to the same server). These are needed for the site to work, so they do not require consent under the EU ePrivacy Directive.

Every email we send includes an unsubscribe link, and we honour unsubscribe requests promptly. We send emails only about the Quivin waitlist and launch, in line with the US CAN-SPAM Act and EU/UK electronic marketing rules.

If you are in the EU, EEA or UK, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (the right to be forgotten);
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with your local data protection authority.

If you are in California or another US state with a privacy law, you have the right to know what personal information we collect and how we use it, to request its deletion or correction, to opt out of any sale or sharing of your personal information (we do not sell or share it), and to be free from discrimination for exercising these rights.

To exercise any of these rights, email team@quivin.ai. We will respond within one month (or the shorter period required by applicable law). We may need to verify your identity first, using the email address you signed up with.

You can also unsubscribe from the waitlist at any time using the link in any of our emails.

We use encryption in transit (HTTPS), restrict access to personal data to people who need it, and keep API keys and other secrets out of our source code. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a personal data breach that affects you, we will notify you and the relevant authorities as required by law.

Quivin is a service for business professionals and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it last changed. If we make material changes, we will tell waitlist members by email before they take effect.

For any question about this policy or your personal data, contact us at team@quivin.ai.