This page covers the Levra waitlist, under the Swiss Federal Act on Data Protection (FADP) and, if you are in the European Union or the EEA, the General Data Protection Regulation (GDPR). The full notice for Levra — the web app, the iOS app and the Chrome extension — is at /privacy.

Who is responsible

Levra (Einzelunternehmen von Tarek Wady)
Solothurn, Switzerland
hello@levra.ch

What we collect, and why

Your email address, a one-time confirmation code (stored only as a hash), the time you signed up and confirmed, the status of your entry, which version of the consent text you agreed to and when, a random code for the unsubscribe link, and when you unsubscribed. We use them for two things:

  • Access. To confirm your address, to manage private access and to contact you about that access. When we let you in, your address goes on the list of addresses that may create a Levra account, and we send you one email saying so.
  • Levra updates. If you tick "send me levra updates" when you join, you get occasional emails about Levra (new features, launch news). The box is optional; you can join without it. We send them only after you have confirmed your address with the link we email you (double opt-in), and every one has an unsubscribe link. Unsubscribing stops the updates; you stay on the waitlist and still hear from us about access. We never share your address with anyone for their own advertising.

The legal basis for access emails is the request you make by joining (Art. 6(1)(b) GDPR); for Levra updates it is your consent (Art. 6(1)(a) GDPR, and Art. 3(1)(o) of the Swiss Unfair Competition Act). You can withdraw your consent at any time with the link in any update or by writing to us; that does not affect what we sent before.

We do not store your IP address. So that one person cannot submit the form a thousand times, we keep a salted one-way hash of it for at most two days.

We also count visits to this page, without cookies. PostHog receives the page, where you came from, your clicks on the page, your browser and device type, and the fact that the form was sent or an address confirmed — never the address. It tells visitors apart by a one-way hash of your IP address and browser with a value that changes every day, computed on its servers; the IP address is then discarded, and nothing is stored on your device. The full description is in section 2 of /privacy, "Website analytics".

Who receives it, and where

  • Supabase (Supabase Pte. Ltd., Singapore) stores the waitlist in its database on Amazon Web Services in Zurich, Switzerland. The provider's staff may access it from Singapore and other countries; this is covered by standard contractual clauses.
  • Resend (Plus Five Five, Inc., USA) sends the confirmation email, the email that you have been let in and Levra updates, and so processes your address in the USA, covered by standard contractual clauses.
  • Cloudflare Turnstile (Cloudflare, Inc., USA) is the spam check on the form. It loads as soon as you open the waitlist page and sees your IP address and technical characteristics of your browser. Cloudflare processes these in the USA and worldwide, covered by the Swiss–U.S. Data Privacy Framework, and also uses them itself to improve its bot detection (Cloudflare's Turnstile privacy addendum).
  • Vercel (Vercel Inc., USA) hosts this website and records the usual technical request data, covered by the Swiss–U.S. Data Privacy Framework.
  • PostHog (PostHog Inc., USA) counts visits to this page as described above. The data is stored in the European Union (Frankfurt, Germany); the provider may access it from the USA, covered by the Swiss–U.S. Data Privacy Framework. Kept for 12 months.

Standard contractual clauses are the European Commission's clauses as recognised by the Federal Data Protection and Information Commissioner (Art. 16(2)(d) FADP). The Data Privacy Framework is recognised by Switzerland for certified US companies (Annex 1 DPO).

How long we keep it

A daily job enforces these periods:

  • The confirmation code is voided when it expires, 24 hours after we send it.
  • An address that is never confirmed is deleted 90 days after sign-up.
  • A declined entry is deleted 30 days after sign-up, or right away if we decline it later than that.
  • Once you have been let in, the entry is deleted 12 months after you confirmed your address.
  • A confirmed address still waiting for access is kept until we let you in, or until you ask us to remove it.
  • The record of your consent, and of your unsubscribing, is kept with the entry and deleted with it, so that we can show what you agreed to.

Once you have been let in, your address stays on the list of addresses that may create an account until you create a Levra account and later delete it, or until you ask us to remove it.

The providers' own server logs are kept for at most 7 days.

Your rights

You can ask us at any time, free of charge, to tell you what we hold about you, to correct it, or to delete your entry, and you can object to the processing or withdraw your consent to Levra updates — write to hello@levra.ch. We answer within 30 days, and confirm the request from the address it concerns before we act. You can also turn to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, or, in the EU or the EEA, to the data protection authority where you live.

Changes

We update this notice when the waitlist changes. The date at the top shows the version you are reading.