What we collect. And what we don't.

Who we are

FAQYOU is operated by [LEGAL ENTITY], registered at [ADDRESS]. You can reach us any time at hello@faqyou.io — that's also the address to use for any privacy question, request, or complaint.

No ad tracking. No pixels.

This website doesn't run Google Analytics, Meta Pixel, TikTok Pixel, LinkedIn Insight, session recording, advertising networks, or cross-site tracking tools.

We use Vercel Web Analytics to understand aggregated page views, referrers, device/browser information, and broad location data. Vercel Web Analytics does not use cookies and Vercel states that page view data is anonymous and not tied to an individual, customer, or IP address.

We use Cloudflare Turnstile on the waitlist form to reduce automated spam. The challenge token is verified server-side before the form is accepted.

We don't need to know exactly what you click. We need to know whether the page works and whether people find it useful.

Cookies and local storage

We use exactly one cookie, and it's there because you asked us to remember your language. Nothing else.

• NEXT_LOCALE — cookie. Stores the language you picked (en or it). First-party, SameSite=Lax, expires after one year. No consent banner required because it's strictly functional.
• theme — browser localStorage (not a cookie). Remembers whether you chose dark or light mode. Stored on your device, never sent to us.

If you join the waitlist

If you leave your details to be notified at launch, here's what happens:

We collect your first name, last name, and email address. We store them in a private CSV file in Vercel Blob as an internal operational waitlist archive.

The CSV records the submission date, email, first name, last name, locale, page source, and waitlist status.

We use this information to send one email when the app is actually ready. That's it. No newsletter, no drip campaign, no 'just checking in'.

You can email us at hello@faqyou.io and we'll remove you within 72 hours.

Legal basis: your consent (Art. 6(1)(a) GDPR).

Your rights under GDPR

If you're in the EU, EEA, or UK you have the following rights over any personal data we hold about you — which, for most waitlist subscribers, means the first name, last name, and email you gave us:

• Access — ask us what we have.
• Rectification — ask us to correct it.
• Erasure — ask us to delete it ('right to be forgotten').
• Restriction — ask us to pause processing.
• Portability — ask for a copy in a machine-readable format.
• Objection — object to processing at any time.
• Withdraw consent — leave the waitlist whenever you want. It will not affect the lawfulness of previous processing.
• To exercise any of these, email hello@faqyou.io. We reply within 30 days — usually faster.

How long we keep things

NEXT_LOCALE cookie: up to 1 year, or until you clear it.

Waitlist name and email: until the app launches and we send the one launch email, or until you ask us to remove you — whichever comes first. At that point we either move you to the regular product flow (only if you choose to sign up) or delete your row from the private waitlist CSV.

Emails you send us: kept as long as needed to answer you and solve any follow-up, then archived or deleted.

International transfers

Vercel processes the private waitlist CSV and anonymous Web Analytics data as part of the hosting, storage, and analytics stack. Cloudflare processes Turnstile challenge data for spam protection. If these providers use subprocessors outside the EU/EEA, the transfer is covered by appropriate safeguards such as Standard Contractual Clauses.

Security

The waitlist CSV is stored as a private Vercel Blob and is accessed only through server-side code using the Vercel read/write token. It is not exposed as a public download on the Site.

Changes to this policy

If we change how this works, we update the 'Last updated' date at the top and, for material changes, we'll tell waitlist subscribers by email before the change applies. No silent edits.

Right to complain

If you think we've mishandled your data and talking to us didn't fix it, you can complain to the data protection authority of the EU country where you live, work, or where the issue happened. We'd prefer you email us first — but it's your right, and we respect it.