← Back to Legal

Privacy Policy & DPA

Last updated: August 24, 2026

Data Controller

Service Provider: Dominik Hess (Private Individual)
Location: Germany
Contact: domi[at]pressurant[dot]com

This privacy policy complies with the EU General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG).

1. Information We Collect

A. Waitlist / Marketing Data

When you sign up for early access via our waitlist, we collect:

  • Name: Your name for personalized communication
  • Email Address: Work email for contact purposes
  • SaaS URL: Your product URL to understand your business
  • Timestamp: When you signed up

Storage: Waitlist data is stored in Tally.so for processing by the service provider.

B. Pressurant User Account Data (When you become a customer)

  • Account Information: Email address, name, company name (optional)
  • Authentication Data: Encrypted password, login timestamps
  • Survey Data: Surveys you create, questions, settings
  • API Keys: Generated keys for SDK integration

C. End User Data (Collected by Pressurant customers via SDK)

When Pressurant customers use our SDK to track their end users:

  • Survey responses and timestamps
  • Session identifiers
  • End User IDs (provided by the Pressurant customer)
  • Event tracking data (page views, interactions)

Important: For end user data, the Pressurant customer is the data controller. Pressurant acts as a data processor, providing infrastructure to store and process this data on their behalf.

2. How We Use Your Information

  • Waitlist Management: Contact you about early access, onboarding
  • Service Delivery: Provide survey creation, management, and analytics
  • Account Management: Authenticate users, manage accounts
  • Technical Operations: Maintain security, fix bugs, improve performance

We NEVER sell your data to third parties. We NEVER use your data for advertising. We only use the processors listed below to run the service, or share as required by law.

3. Legal Basis for Processing (GDPR)

  • Consent (Article 6(1)(a)): Only where you give specific optional consent, for example opting in to product or marketing emails. You can withdraw it at any time.
  • Contract Performance (Article 6(1)(b)): Joining the waitlist to be contacted about early access (at your request), creating an account, and providing the service you requested.
  • Legal Obligation (Article 6(1)(c)): Compliance with legal requirements

4. Data Retention

  • Waitlist Data: Retained until you become a customer or request deletion
  • Account Data: Retained while your account exists, deleted within 30 days of account deletion
  • Survey Response Data: Retained while the survey exists

5. Your Rights Under GDPR

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion (GDPR Article 17)
  • Restrict Processing: Limit how we use your data
  • Data Portability: Receive your data in a structured format
  • Object: Object to processing
  • Withdraw Consent: At any time

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments.

Beta Service Notice: Security measures are scaled appropriately for a beta service operated by a private individual. We implement industry-standard security practices through our infrastructure provider (Supabase).

7. Third-Party Services

  • Supabase: Database hosting, authentication (EU data centers, GDPR-compliant)
  • Tally.so: Waitlist form data collection and storage (GDPR-compliant)
  • Vercel: Website hosting and privacy-friendly analytics (no cookies, no direct identifiers)

International transfers: Some processing occurs in the US, Vercel (hosting/analytics), under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. Tally.so is an EU processor (Tally BV, Belgium; form data stored in the EU).

8. Cookies & Analytics

Cookies

This website stores your theme preference in your browser's localStorage (not a cookie). No tracking or advertising cookies are used.

Website Analytics (Vercel Web Analytics)

We use Vercel Web Analytics to understand how visitors use our website. This service is designed to be privacy-friendly:

  • No cookies: Vercel Analytics does not use cookies
  • No direct identifiers: No directly identifying information is collected; any IP address is used only transiently to derive the hash and is not stored
  • Anonymized data only: Visitors are identified by a hash that resets every 24 hours
  • No cross-site tracking: Visitors cannot be tracked across different websites

Data collected: Page views, referrer URLs, country (from IP, not stored), device type, browser, operating system. All data is aggregated and anonymized.

For more information, see Vercel's Analytics Privacy Policy.

9. Contact

For privacy inquiries or to exercise your rights:

Email: domi[at]pressurant[dot]com
Response Time: 30 days as required by GDPR

Right to Complain: You may lodge a complaint with your local data protection authority.

We use privacy-friendly analytics. No cookies, no personal data.