PRIVACY POLICY

1. WHO WE ARE

FanQuota (“we”, “us”, or “our”) operates the website fanquota.nanocorp.app and manages a waitlist for early access to our ticket-access platform. This policy explains how we collect, use, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. DATA WE COLLECT

When you join our waitlist, we collect:

• Email address — to contact you when founding member spots open.
• Event preferences — the category of events you're most interested in (concerts, sports, theater, festivals, or all).
• Budget range — your typical maximum spend per ticket, to help us match you with relevant opportunities.
• UTM parameters — if you arrive via a tracked link, we record the source, medium, and campaign to understand how people find us.

We do not collect payment information, government IDs, or any special-category personal data at this stage.

3. HOW WE USE YOUR DATA

• To send you founding-member invitations and product updates by email.
• To send a confirmation email immediately after you join the waitlist.
• To tailor early-access opportunities to your stated interests and budget.
• To understand demand patterns and improve the product (aggregate analytics only).
• To measure the effectiveness of our marketing channels (UTM data).

Legal basis (GDPR Art. 6): Processing is based on your consent, given when you voluntarily submit the waitlist form.

4. DATA RETENTION

We retain your data for as long as you remain on our waitlist or until you request deletion. If FanQuota ceases operations, all personal data will be deleted within 90 days.

5. SHARING YOUR DATA

We do not sell, rent, or trade your personal data. We may share it with the following categories of sub-processors strictly to deliver our service:

• Database hosting — your data is stored in a PostgreSQL database on Neon (US-based, SOC 2 compliant).
• Transactional email delivery — waitlist confirmation emails are processed by our email delivery provider.
• Analytics — anonymised usage data is processed by our analytics provider for product improvement.

All sub-processors are contractually bound to process your data only on our instructions and in compliance with GDPR.

6. YOUR RIGHTS (GDPR)

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — unsubscribe or ask for removal at any time with no penalty.

Every confirmation email includes a direct unsubscribe link.

To exercise any of these rights, email us at hello@fanquota.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

7. COOKIES & ANALYTICS

Our site uses a lightweight analytics script to capture page views, button clicks, and Core Web Vitals. No personally identifiable information is attached to these events. We do not use third-party advertising cookies. By using this site you consent to this minimal analytics collection.

8. SECURITY

We use industry-standard practices to protect your data, including encrypted connections (HTTPS), access controls, and hosting with compliant infrastructure providers. No method of transmission over the internet is 100% secure; we will notify you promptly if a breach affects your personal data.

9. CHANGES TO THIS POLICY

We may update this policy as our product evolves. Material changes will be communicated by updating the “Last updated” date above. Continued use of the waitlist after changes constitutes acceptance of the revised policy.

10. CONTACT

For any privacy-related questions, email us at hello@fanquota.com.