This Privacy Policy explains how Habivo EOOD (Хабиво ЕООД) (“Habivo”, “we”, “us”) collects and uses your personal data when you visit habivo.app (the “Site”) and join our launch waitlist. We are established in Bulgaria and act as the data controller for the personal data described below. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
1. Who we are
Controller: Habivo EOOD (Хабиво ЕООД), UIC 208882662, zh.k. Hale, bl. 9, vh. D, et. 7, ap. 105, 8600 Yambol, Bulgaria. For any privacy question or request, contact us at privacy@habivo.app.
2. What personal data we collect
- Waitlist data — the email address you submit to be notified about our launch, together with a record of your consent: the time of signup and confirmation, the page the signup came from, your language preference, and a one-way hash of your IP address (we never store the IP address itself in our waitlist records).
- Technical and usage data (collected automatically) — the page or source that referred you to the Site (referrer), and standard information your browser sends to our servers and hosting provider, such as IP address, device and browser type, and timestamps, recorded in server logs.
- First-party, cookieless analytics — we measure visits to the Site ourselves, without cookies and without any third-party analytics service. For each page view we record the page, language, referrer, and a pseudonymous visitor identifier derived from a one-way hash of your IP address and browser type using a key that changes every day, so visits cannot be linked across days or to you personally.
3. How and why we use your data
We use your personal data for the following purposes and on the following legal bases:
- To notify you when Habivo launches and send you the updates you asked for — legal basis: your consent (GDPR Art. 6(1)(a)). We use a double opt-in process: after you sign up we send one confirmation email, and we only send launch or marketing email to addresses that have been confirmed via the link in that email. If you do not confirm within 30 days, we delete your signup. You can withdraw your consent at any time via the unsubscribe link in our emails or by contacting us.
- To understand how visitors find and use the Site and to improve it — legal basis: our legitimate interests (Art. 6(1)(f)) in operating and improving the Site, or your consent where required for non-essential cookies.
- To keep the Site secure and to comply with our legal obligations — legal basis: legitimate interests and legal obligation.
4. Cookies
The Site does not set cookies. Our analytics work without cookies or any other identifiers stored on your device (see section 2), which is why the Site shows no cookie banner. The only local storage the Site may use is strictly functional (for example, remembering a display preference you chose), which requires no consent.
5. Who we share your data with
We do not sell your personal data. We share it only with service providers (processors) acting on our instructions and bound by data-processing agreements:
- website hosting and infrastructure — Vercel Inc. (USA);
- database — Neon Inc. (USA); the data itself is stored in the European Union (AWS eu-central-1, Frankfurt, Germany);
- email delivery — Resend (Plus Five Five, Inc., USA);
- file storage, content delivery and domain redirection — Cloudflare, Inc. (USA); Cloudflare stores files uploaded to the Habivo platform by our customers and serves them from cdn.habivo.io, and handles requests to our habivo.io domain, which redirects to this Site. No waitlist data is stored with this provider;
- analytics — none; analytics are first-party only (see section 2).
6. International transfers
Some of our providers are established in the United States. Where personal data is transferred outside the European Economic Area, we rely on the EU–US Data Privacy Framework (where the provider is certified) and/or the Standard Contractual Clauses approved by the European Commission.
7. How long we keep your data
- Waitlist signups — until 12 months after our launch, or until you unsubscribe or ask us to delete your data, whichever comes first.
- Unconfirmed signups — deleted automatically 30 days after signup if the confirmation link is never used.
- Analytics data — deleted automatically after 180 days.
- Server logs — kept for a short period by our hosting provider for security and operations.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- data portability;
- withdraw consent at any time (this does not affect processing already carried out).
To exercise any of these rights, email privacy@habivo.app. You also have the right to lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria — www.cpdp.bg.
9. Security
We take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access.
10. Children
The Site and Habivo are intended for businesses and professional users and are not directed at children. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above.
12. Contact
Questions about this policy or your data? Email privacy@habivo.app.