Legal
Privacy Policy
Available in English only · Last updated April 26, 2026
Data Controller
The controller responsible for your personal data is:
BuisquitBratislava, Slovenská republika
hello@buisquit.com
Buisquit is currently operating as a pre-launch project. The full registered legal name, street address, and company identification number (IČO) will be added to this section once the entity is formally incorporated. Until then, data subject requests can be directed to hello@buisquit.com.
What Data We Collect
When you register for the Buisquit waitlist we collect the following personal data:
All users
Owner-specific fields
Seeker-specific fields
Why We Collect It
- Waitlist management — to record your interest and contact you when the Buisquit platform launches.
- Email confirmation — to send you a transactional receipt confirming your registration was received.
- Admin notification — to alert the Buisquit team of new sign-ups, including any document you attached.
- Marketing emails — only if you explicitly opted in, to send product updates approximately once a month (never spam; unsubscribe at any time).
- Duplicate prevention — your email address is checked against existing records to avoid double entries.
- Abuse prevention — your IP address is temporarily checked in server memory to block automated form submissions.
Legal basis: consent (GDPR Art. 6(1)(a)) for waitlist data collection and marketing emails — you tick the required consent checkbox before submitting; legitimate interest (Art. 6(1)(f)) for IP-based abuse prevention, where the interest in protecting the service is not overridden by your rights given the minimal, transient nature of the processing.
How Long We Keep It
Your waitlist data is retained until the Buisquit platform publicly launches, or until you request deletion — whichever comes first, and for no longer than 3 years from the date of sign-up in any case. Upon launch, data will either be migrated to the live platform under an updated privacy policy (with fresh consent where required) or deleted.
IP addresses used for rate limiting are held in server memory only for the lifetime of the serverless function instance (typically a few minutes) and are never written to the database.
Email inbox: Confirmation and admin notification emails — including any document attachments you provide — are stored in our Gmail inbox. We retain those emails for as long as necessary to operate the waitlist, and in any case for no longer than 2 years from sign-up, after which they are deleted or archived in a non-identifiable form.
Who We Share It With
We do not sell, rent, or trade your personal data. We share it only with the following sub-processors required to operate the service:
Your waitlist data is stored in a Turso-hosted libSQL database on EU infrastructure. Turso's servers are located within the EEA; no transfer outside the EEA occurs.
Privacy policy ↗Confirmation and notification emails — including any file attachments you provide — are sent from hello@buisquit.com via Google's Gmail API using OAuth 2.0. Google may process data in the United States. Such transfers are covered by the EU–US Data Privacy Framework (DPF) and Google's Standard Contractual Clauses (SCCs) as documented in Google's privacy policy.
Privacy policy ↗The landing page and API are deployed on Vercel (EU region fra1). Vercel may process request logs that include IP addresses and basic request metadata. Any processing outside the EEA is governed by Vercel's SCCs.
Privacy policy ↗When you accept analytics cookies, we use PostHog Cloud EU (Frankfurt) to measure product usage (events, funnels, and session replay). We configure PostHog to avoid storing direct identifiers in event payloads and to support opt-out and deletion workflows.
Privacy policy ↗When you accept analytics cookies, we use Microsoft Clarity for session recordings and heatmaps. Clarity data may be processed by Microsoft in the United States. We pass your consent choice via Clarity Consent API v2.
Privacy policy ↗Where sub-processors transfer personal data outside the European Economic Area, such transfers rely on an adequacy decision, the EU–US Data Privacy Framework, or Standard Contractual Clauses adopted by the European Commission.
Cookies
We use a consent banner for analytics cookies. By default, analytics are disabled until you explicitly opt in.
If you accept analytics, PostHog and Microsoft Clarity may set cookies or local browser identifiers to provide product analytics and session replay features. You can withdraw consent at any time via "Cookie preferences" in the footer.
Your GDPR Rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete information.
- Deletion — ask us to erase your data ("right to be forgotten").
- Restriction — request that we limit how we process your data.
- Objection — object to processing carried out on the basis of legitimate interest.
- Withdrawal of consent — opt out of marketing emails at any time with no effect on other processing.
- Complaint — lodge a complaint with your national data protection authority: in Slovakia, the Úrad na ochranu osobných údajov SR; in Czech Republic, the Úřad pro ochranu osobních údajů (UOOU); or the supervisory authority of your country of residence.
To exercise any of these rights, email hello@buisquit.com. We will respond within 30 days. In complex cases we may extend this period by a further 2 months; we will inform you of any extension and the reason within the initial 30-day period, as permitted by GDPR Article 12(3).
Changes to This Policy
We may update this policy as the product evolves. Material changes will be communicated by email to registered waitlist members who have provided a valid address. The "last updated" date at the top of this page always reflects the current version.