Tyave

Privacy notice: tyave.com website and waitlist

Version 1.0 · effective 18 October 2026

Drafted with AI assistance; not a substitute for review by a qualified lawyer.

In short: we use your email for the waitlist, to invite you to the free Beta and to write to you about the launch, and, only if you choose, for short product surveys. No analytics, no profiling, we do not sell your data. Your data is stored in EU regions (with possible access by US providers, see section 7) and you can delete it whenever you like.

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Who is the controller

The controller is Teachere di Gabriele Vaudano, a sole proprietorship established in Italy (registered office: [da completare]; VAT no.: [da completare]). Contact for any request about your data: hello@tyave.com.

We have not appointed a Data Protection Officer (DPO): it is not mandatory because we do not process data on a large scale or special categories of data, and we do not systematically monitor people (Art. 37 GDPR).

2. What data we process

When you join the waitlist we store:

We do not ask for your name, phone number, Instagram profile or anything else.

Technical data. Like any website, our hosting provider (Vercel) processes connection data, such as your IP address and the requests made, in technical security and operation logs. We do not store your IP address in our database and do not use these logs to identify you. Function logs remain available for 1 hour on the Vercel plan we use (Vercel "Runtime Logs" documentation, accessed 18/10/2026); any other technical data Vercel keeps for security follows Vercel's privacy policy.

3. Why we process it and on what legal basis

PurposeLegal basisMandatory?
Manage the waitlist, send the confirmation email, invite you to the free Beta in order of sign-up, write to you about the Tyave launchConsent, Art. 6(1)(a) GDPRYes, to sign up
Send you short product surveys (e.g. on price range)Separate, optional consent, Art. 6(1)(a)No
Site security and abuse prevention (e.g. automated sign-ups, rate limits), minimal technical logsLegitimate interest, Art. 6(1)(f)Yes, to run the site

Providing your data is optional, but without an email and consent we cannot sign you up. Consent to surveys is independent: if you do not give it, you stay on the list all the same.

We do no profiling or automated decision-making. We run no analytics. We do not use your data for advertising and do not sell or pass it to third parties for marketing.

4. Withdrawing consent

You can withdraw consent at any time, with no consequences: use the unsubscribe link in any email or write to hello@tyave.com. Withdrawal does not make earlier processing unlawful. After withdrawal we delete your email from the list.

5. How long we keep your data

6. Who receives the data

We use providers who process data on our behalf (processors, Art. 28 GDPR) under data processing agreements (DPAs):

ProviderRoleWhere
Vercel Inc. (USA)Site hosting and the function receiving the formFrankfurt region (fra1)
Neon, Inc. (USA)Postgres database holding sign-upsAWS eu-central-1, Frankfurt
Brevo (Sendinblue SAS, France)Sending emails (confirmation, invitations, communications)EU

There are no other recipients, except public authorities where required by law. Data is not disseminated.

7. Transfers outside the European Economic Area

Data is stored in the EU. Vercel and Neon are, however, US companies: access from the US (for instance for technical support) is a transfer outside the EU. It is covered by safeguards under Arts. 44-46 GDPR: the adequacy decision on the EU-US Data Privacy Framework (for certified providers) and/or the European Commission's standard contractual clauses included in their DPAs. Brevo is based in France; any sub-processors are listed in its DPA. You can ask us for a copy of the safeguards at hello@tyave.com.

Provider DPAs (viewed on 18 October 2026):

8. Cookies

The site uses only one technical cookie to remember your cookie preferences (cc_cookie, 6 months). No analytics or profiling cookies, no third-party content. Details in the Cookie policy.

9. Minimum age

The waitlist and Beta are for people aged 18 or over. We do not knowingly collect data from minors; if we find a minor has been signed up, we delete their data.

10. Your rights

You can ask us at any time (Arts. 15-22 GDPR) for:

Write to hello@tyave.com: we reply without undue delay and in any case within one month (extendable by two months in complex cases, with notice). For security we may ask you to confirm the email is yours.

You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) (https://www.garanteprivacy.it) or with the authority of your country of residence.

11. Visitors outside the EU (e.g. United States)

The site is aimed at people in Italy and the EU. If you visit from the United States: we do not sell or share personal information (as defined in CCPA/CPRA and similar state laws), run no behavioural advertising and use data only for the purposes above. We probably fall below the thresholds that make those laws apply, but we still honour requests to access, delete and correct, and will not discriminate against you for making them: write to hello@tyave.com.

12. Changes

If we change this notice or the consent text, we update the version at the top and, if the change affects purposes, ask for your consent again. Earlier versions are available on request.

Sources

Viewed on 18 October 2026:

Back to the main page