Waitlist privacy notice

What we collect

When you join the waitlist we store the email address you type, whether you selected “working professional” or “student”, and the page attribution data your browser sends (referring URL and any UTM parameters in the link you arrived on). We also store your browser’s user-agent string and a salted, one-way hash of your IP address.

Why we collect it

The email address is how we send your invite. The persona and attribution data tell us who is interested and where they came from, so we can plan the launch. The IP hash exists only to stop one machine flooding the form — we never store your actual IP address, and the hash cannot be reversed back into one.

What we don’t do

We don’t sell or rent your address, we don’t share it with advertisers or data brokers, and we don’t add you to a newsletter. We use Vercel Analytics to count page views — it is cookieless, stores no personal data and does not track you across sites. There are no advertising trackers.

We email you about three things only: your private link, when an address is first entered on the form; your Elevyox invite; and — at most once every 15 days — to tell you when someone has named you as a person they look up to or see potential in. Every one of those carries a one-click link to stop them for good.

That first email is also the whole of our account security. There is no password here, so opening the link is how we know the address is yours. Until someone does, the entry is inert: nobody can see it or act on it — which is what stops a stranger entering your address and using the place it makes.

If someone named you (and you never signed up)

Members can privately name up to two people they look up to and two they see potential in. To do that they give us that person’s name and either an email address or a LinkedIn profile URL. So we may hold a small amount of data about you even if you’ve never used this site: your name, one contact identifier, and a count of how many people have named you.

We use it for one purpose — to let you know, once, that someone thought well of you, and to place you correctly if you later join. Our legitimate interest is limited to that single notification; you can object at any time and we’ll honour it permanently. We never tell you, or anyone, who named you. We never sell or share this data, and being named is not published anywhere.

Every such email carries a one-click unsubscribe. Using it suppresses your address permanently — not just for that message. If you’d rather not wait to be contacted, email hello@elevyox.com and we’ll erase every record of you and block future entries for that address. People named by LinkedIn are never emailed at all.

Where it lives

Signups are stored in our PostgreSQL database, hosted by Neon in the EU (Frankfurt). The site itself is hosted by Vercel. Both process the data on our behalf under their standard data processing terms.

Getting your data removed

Email hello@elevyox.com from the address you signed up with and we’ll delete your row and confirm. No reason needed, no retention period — it goes when you ask.

Changes

If this notice changes materially before launch, we’ll email everyone on the list rather than quietly editing this page.