Data Controller
Service Provider: Dominik Hess (Private Individual)
Location: Germany
Contact: domi@ignyte.so
This privacy policy complies with the EU General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG).
1. Information We Collect
A. Waitlist/Marketing Data
When you sign up for early access via our waitlist, we collect:
- Name: Your name for personalized communication
- Email Address: Work email for contact purposes
- SaaS URL: Your product URL to understand your business
- Timestamp: When you signed up
Storage: Waitlist data is stored in Google Sheets for processing by the service provider.
B. Ignyte User Account Data (When you become a customer)
- Account Information: Email address, name, company name (optional)
- Authentication Data: Encrypted password, login timestamps
- Survey Data: Surveys you create, questions, settings
- API Keys: Generated keys for SDK integration
C. End User Data (Collected by Ignyte customers via SDK)
When Ignyte customers use our SDK to track their end users:
- Survey responses and timestamps
- Session identifiers
- End User IDs (provided by the Ignyte customer)
- Event tracking data (page views, interactions)
Important: For end user data, the Ignyte customer is the data controller. Ignyte acts as a data processor, providing infrastructure to store and process this data on their behalf.
2. How We Use Your Information
- Waitlist Management: Contact you about early access, onboarding
- Service Delivery: Provide survey creation, management, and analytics
- Account Management: Authenticate users, manage accounts
- Technical Operations: Maintain security, fix bugs, improve performance
✅ We NEVER sell your data to third parties
✅ We NEVER use your data for advertising
✅ We NEVER share data except as required by law
3. Legal Basis for Processing (GDPR)
- Consent (Article 6(1)(a)): When you sign up for the waitlist or create an account
- Contract Performance (Article 6(1)(b)): To provide the service you requested
- Legal Obligation (Article 6(1)(c)): Compliance with legal requirements
4. Data Retention
- Waitlist Data: Retained until you become a customer or request deletion
- Account Data: Retained while your account exists, deleted within 30 days of account deletion
- Survey Response Data: Retained while the survey exists
5. Your Rights Under GDPR
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion (GDPR Article 17)
- Restrict Processing: Limit how we use your data
- Data Portability: Receive your data in a structured format
- Object: Object to processing
- Withdraw Consent: At any time
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments.
Beta Service Notice: Security measures are scaled appropriately for a beta service operated by a private individual. We implement industry-standard security practices through our infrastructure provider (Supabase).
7. Third-Party Services
- Supabase: Database hosting, authentication (EU data centers, GDPR-compliant)
- Google Sheets: Waitlist data storage
- Vercel: Website hosting and privacy-friendly analytics (no cookies, anonymized data)
8. Cookies & Analytics
Cookies
This website uses only essential cookies for functionality (theme preference). No tracking or advertising cookies are used.
Website Analytics (Vercel Web Analytics)
We use Vercel Web Analytics to understand how visitors use our website. This service is designed to be privacy-friendly:
- No cookies: Vercel Analytics does not use cookies
- No personal data: No personally identifiable information is collected
- Anonymized data only: Visitors are identified by a hash that resets every 24 hours
- No cross-site tracking: Visitors cannot be tracked across different websites
Data collected: Page views, referrer URLs, country (from IP, not stored), device type, browser, operating system. All data is aggregated and anonymized.
For more information, see Vercel's Analytics Privacy Policy.
9. Contact
For privacy inquiries or to exercise your rights:
Email: domi@ignyte.so
Response Time: 30 days as required by GDPR
Right to Complain: You may lodge a complaint with your local data protection authority.