Privacy Policy
Who we are
This website is operated by Oliver Nobbe, Essen, Germany. If you have questions about this privacy policy or your personal data, please contact us via the Impressum | Imprint.
What data we collect and why
When you sign up for early access, we collect your email address. We use it solely to notify you when LeadFlow is either available as a TestFlight beta or live on the App Store. We do not use it for marketing, advertising, or any other purpose.
We also store the following technical data to operate the signup flow:
- A confirmation token (a random string used to verify your email address)
- The timestamp of your signup and confirmation
- Your confirmation status (pending or confirmed)
Legal basis (GDPR Art. 6)
We process your email address on the basis of your consent (Art. 6(1)(a) GDPR), given when you submit the signup form and confirm your email address via the double opt-in link.
How long we keep your data
We retain your email address until LeadFlow is available as Testflight beta or launches and the notifications have been sent, or until you request deletion — whichever comes first. After the final launch email is sent, we delete all waitlist records within 30 days.
Where your data is stored
Your email address is stored in a Supabase database. Supabase is GDPR-compliant and processes data under Standard Contractual Clauses. Email delivery is handled by Resend, who operates under a Data Processing Agreement compliant with GDPR. Both services may process data within the EU or in the United States under appropriate safeguards.
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data at any time
- Withdraw consent at any time without affecting the lawfulness of prior processing
- Lodge a complaint with a supervisory authority (in Germany: your local Landesbeauftragter für Datenschutz, or the BfDI)
To exercise any of these rights, you can: unsubscribe via the link in any email we send you, use this unsubscribe form, or contact us via the details in the Impressum | Imprint.
Server logs
Our web server logs standard access data including IP addresses and pages visited. These logs are retained for a maximum of 7 days and are used solely for technical operation and security purposes.
No cookies, no tracking
This website does not use cookies, tracking pixels, analytics scripts, or any third-party tracking tools. No data is shared with advertisers.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision.