Privacy Policy — Cultivo

Cultivo (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains what we collect, why, and your rights under the General Data Protection Regulation (GDPR).

1. Who we are

Data controller: [Your full legal name or company name]
Address: [Your address]
Email: privacy@cultivo.organic

This service operates from the European Union and is subject to EU data protection law.

2. What data we collect

Waitlist signups

When you join the waitlist, we collect:

Email address — to notify you when the beta opens
Role (producer, distributor, buyer, investor, consultant, other) — to understand who is interested
Country — to prioritise launch geography
Company name (optional) — for context
Pain point description (optional) — to inform product decisions
Interview opt-in — whether you're open to a founder conversation

We also record the page you signed up from (e.g. /producers) to understand which messaging resonates with which audience. No other data is collected automatically at signup.

Analytics

This site uses Vercel Analytics, a privacy-first, cookieless analytics tool. It does not set cookies, does not track you across sites, and does not collect personally identifiable information. No cookie banner is required. You can read Vercel’s privacy policy at vercel.com/legal/privacy-policy.

3. Legal basis for processing

Legitimate interest (Art. 6(1)(f) GDPR) — understanding demand for the platform before launch.
Consent (Art. 6(1)(a) GDPR) — for the optional interview opt-in. You can withdraw this consent at any time by emailing us.

4. How we use your data

To send you one email when the beta opens (and only that, unless you asked for more).
To contact you for a founder interview, if you opted in.
To understand which roles and geographies show the most demand — in aggregate, never individually profiled.

We do not use your data for advertising, profiling, or automated decision-making. We do not sell or share your data with third parties, except as described in section 5.

5. Who we share data with

Your data is stored in Supabase (PostgreSQL database hosted on AWS eu-central-1, Frankfurt). Supabase is our data processor under a Data Processing Agreement. You can review their security practices at supabase.com/security.

No other third parties have access to your personal data.

6. How long we keep your data

Waitlist data is retained until you ask us to delete it, or until 12 months after the platform launches — whichever comes first. At that point, inactive waitlist entries are deleted.

7. Your rights

Under GDPR you have the right to:

Access — request a copy of the data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your data (“right to be forgotten”).
Restriction — ask us to stop processing your data while a dispute is resolved.
Portability — receive your data in a machine-readable format.
Object — object to processing based on legitimate interest.
Withdraw consent — for the interview opt-in, at any time.

To exercise any of these rights, email privacy@cultivo.organic. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Germany: Bundesbeauftragter für den Datenschutz (BfDI). In the Netherlands: Autoriteit Persoonsgegevens (AP).

8. Cookies

This site does not use tracking cookies. Supabase may set a session cookie if you create an account (beta users only). Vercel Analytics is cookieless.

9. Changes to this policy

If we make material changes, we will update the “last updated” date above. For significant changes affecting beta users, we will notify you by email.

10. Contact

Questions about this policy? privacy@cultivo.organic