Privacy Policy

Last updated: [DATE — fill in before publishing]

1. Controller

The data controller responsible for processing your personal data is:
[YOUR FULL LEGAL NAME OR COMPANY NAME]
[Street Address]
[City, Postcode, Country]
Email: hello@sovoa.me

2. What Data We Collect

When you sign up for the Sovoa waitlist, we collect the following information:

• Email address
• Name (if provided)
• Practice type (if provided)
• UTM campaign parameters (to understand which marketing channel you came from)
• Timestamp of your signup

Analytics cookies (with your consent): If you accept analytics cookies, we use Vercel Analytics, a cookieless, privacy-first analytics service. No personal data is stored or shared for analytics purposes.

Marketing cookies (with your consent): If you accept marketing cookies, we use the Meta Pixel, a tracking tool by Meta Platforms Ireland Limited. The Pixel places cookies (_fbp, _fbc) in your browser and sends the following data to Meta when you visit our site or submit the waitlist form:

• Your hashed (SHA-256) email address (only on form submission)
• Browser cookies set by the Meta Pixel (_fbp, _fbc)
• Your IP address and browser user agent
• Page URL at the time of the event

In addition to the client-side Pixel, we also transmit the same data server-side via the Meta Conversions API (CAPI) to improve the accuracy of conversion measurement. Both channels send an identical event ID to prevent double-counting.

You can withdraw your marketing consent at any time via the cookie settings link in the footer of our website.

3. Why We Collect It

We process your data for the following purposes:

• Waitlist management — to inform you when Sovoa launches and when beta access becomes available.
• Product updates — to send you occasional email updates about Sovoa's development.

4. Legal Basis (GDPR Art. 6)

Processing is based on your consent (Art. 6(1)(a) GDPR), provided when you submit your email address via the waitlist form. You may withdraw your consent at any time by unsubscribing from our emails or by contacting us directly.

The use of the Meta Pixel and Conversions API is also based exclusively on your consent (Art. 6(1)(a) GDPR), which you provide via the cookie consent banner. You may withdraw this consent at any time via the cookie settings link in the footer of our website. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

5. Data Retention

We store your data for as long as you remain on the waitlist, or until you request deletion. If Sovoa does not launch, all waitlist data will be deleted within 12 months of the last planned launch date.

6. Third Parties

We use the following third-party services to process your data:

• HubSpot Ireland Ltd — CRM and contact management. Data is stored within the European Union. HubSpot Ireland Ltd, 1 Sir John Rogerson's Quay, Dublin 2, Ireland. See HubSpot's Privacy Policy.
• Mailgun Technologies, Inc. — Transactional email delivery (your confirmation email). Mailgun is a US company; transfers are covered by Standard Contractual Clauses (SCCs). See Mailgun's Privacy Policy.
• Vercel Inc. — Hosting and infrastructure. Site hosted in the EU (Frankfurt). Cookieless analytics only. See Vercel's Privacy Policy.
• Meta Platforms Ireland Limited (marketing cookies only, with your consent) — We use the Meta Pixel and Meta Conversions API to measure the effectiveness of our advertising campaigns. Data recipient: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta may transfer data to its parent company Meta Platforms Inc. in the United States. Such transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses. See Meta's Privacy Policy.

We do not sell your data to any third party.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15)
• Request correction of inaccurate data (Art. 16)
• Request deletion of your data (Art. 17)
• Restrict processing of your data (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time, without affecting prior processing

To exercise any of these rights, please email hello@sovoa.me. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Austria, this is the Datenschutzbehörde (DSB).

8. Changes to This Policy

We may update this policy as our services evolve. We will notify waitlist members of material changes via email. The date at the top of this page reflects the most recent revision.