Privacy Notice & Waitlist Terms
Last updated: 27 April 2026
By joining our waitlist, you agree to what's below. We've kept it short on purpose. This is just a waitlist, not the full product.
Who we are
Clockit Entertainment P.C., a company registered in Greece, is the data controller for the information you provide.
For any privacy-related question or to exercise your rights, contact us at clockit.entertainment@gmail.comwith the subject line “Privacy Request”. We'll respond within 30 days.
What we collect and why
When you join the waitlist, we ask for:
- Your email address, so we can contact you about early access
- Your name, so we can address you properly
That's it. We do not collect sensitive data, payment data, or any information beyond what you type into the form.
We also process your IP address for two purposes:
- Security: to prevent automated abuse of the signup form. The IP itself is discarded within 24 hours.
- Approximate city:from your IP, we derive only your city (for example, “Athens”). We use this to understand which cities our waitlist is reaching, so we can plan future launch events and prioritise where to roll out the product. We do not collect precise location, GPS coordinates, or street-level data.
We use Plausible Analytics to count how many people visit our site. Plausible is cookieless and configured so that no personal data is collected: it produces only aggregated, anonymous statistics about site traffic. Because no personal data is processed, this activity falls outside the scope of the GDPR.
Is it mandatory to provide your data?
No. Providing your name and email is entirely voluntary. The only consequence of not providing them is that you cannot join the waitlist, there is no other disadvantage. (Art.13.2.e)
Legal basis (GDPR Art. 6)
Consent (Art. 6.1.a): process your email and name on the basis of your consent, which you give by ticking the consent box on the signup form. You can withdraw it at any time by clicking unsubscribe in any email; withdrawal does not affect the lawfulness of processing before withdrawal.
Legitimate interest (Art. 6.1.f): short-term IP-based rate limiting to protect the signup form from abuse.
Who else sees your data
We do not sell, rent, or share your data for marketing. We only share it with the service providers we need to operate the waitlist. We use the following data processors (Art. 28 GDPR):
- Database: Supabase, Inc. stores your email and name. Hosted in Frankfurt, Germany (EU).
- Website hosting: Vercel, Inc. hosts the website. (US)
- Email delivery: Resend, Inc. sends waitlist communications. (US)
- Rate limiting: Upstash, Inc. temporarily processes IP addresses to prevent signup form abuse. Hosted in Frankfurt, Germany (EU).
- Analytics: Plausible Insights OÜ (Estonia), anonymous, cookieless website analytics.
We've assessed that this limited and short-lived processing does not override your interests, rights, or freedoms. Data processing agreements with each of these providers are signed.
International data transfers
In short: your data is stored on servers in Germany (EU). However, three of our service providers, Vercel, Resend, and Supabase, are US-incorporated companies, which means their staff may occasionally access your data from outside Europe for technical support or maintenance. To protect you when this happens, we use legal safeguards approved by the European Commission, called Standard Contractual Clauses, and we've assessed the risks involved. Given that we only handle your name and email, and that the data is encrypted and access-controlled, we consider the protection level appropriate. If you'd like the full details, including a copy of our transfer assessment, email us at clockit.entertainment@gmail.com.
The technical detail, for those who want it
Although your data resides on EU servers (Frankfurt, Germany), Vercel, Inc., Resend, Inc., and Supabase, Inc. are incorporated in the United States. Limited access from outside the European Economic Area may occur for support or maintenance purposes. Where such access occurs, we ensure appropriate safeguards are in place as required by Chapter V of the GDPR.
Specifically, we rely on the Standard Contractual Clauses approved by the European Commission under Decision 2021/914. We have conducted a transfer impact assessment in light of the requirements set out in the Schrems II judgment (Case C-311/18). Given the limited scope of the data transferred (name and email address only), and the technical and organisational measures applied by our processors, including encryption in transit and at rest, strict access controls, and contractual commitments regarding government access requests, we consider the level of protection essentially equivalent to that guaranteed within the EEA.
A copy of our transfer impact assessment and the relevant SCCs are available on request by emailing clockit.entertainment@gmail.comwith the subject line “Transfer Documentation Request”.
How long we keep your data
We keep your email and name until our product launches and you've been onboarded, or for a maximum of 18 months from signup, whichever comes first. After that, we delete your data unless you've become an active user of the launched product. If you become an active user of the launched product, your data will continue to be processed under the product's privacy policy, which we'll provide to you at onboarding.
IP addresses processed for rate limiting are retained for a maximum of 24 hours.
You can ask us to delete your data earlier at any time.
Your rights
Under the GDPR, you have the right to:
- access your data
- correct it if it's wrong
- have it deleted
- restrict or object to how we use it
- receive it in a portable format
- withdraw your consent
To exercise any of these, email us at clockit.entertainment@gmail.com.
You also have the right to file a complaint with the Greek Data Protection Authority — Hellenic DPA, Kifisias 1-3, 11523 Athens — or via their website at www.dpa.gr.
Age requirement
You must be at least 15 years old to join the waitlist (the digital consent age under Greek Law 4624/2019). If you're younger, please don't sign up.
Security
We protect your data with HTTPS encryption, access-controlled storage, and rate limiting on our forms. No system is 100% secure, but we take reasonable precautions and will notify you and the Greek DPA if a breach ever puts your data at risk.
Automated decision-making
We do not use your data for automated decision-making or profiling. All decisions about waitlist communications and eventual onboarding are made by humans. (Art. 13.2.f)
Waitlist terms
By joining, you also agree that:
- Joining the waitlist does not guarantee access to the product, a launch date, or any specific features.
- You will provide accurate information and won't use bots or automated tools to sign up.
- The website's content (branding, text, design) belongs to Clockit Entertainment P.C. Your name and email remain yours; you grant us permission to use them only for the purposes described above.
- We provide the waitlist “as is” and may modify or discontinue it at any time. We're not liable for delays or service interruptions.
- These terms are governed by Greek law, with the courts of Athens having jurisdiction over any dispute.
Changes
If we make significant changes to this notice, we'll email you. The “Last updated” date above always reflects the current version.