How we handle your data.

Last updated: 15 July 2026

The short version: when you submit your email address, Resend processes it to deliver one confirmation message. We add it to the launch and early-access list only after the confirmation link opens and Qanvi receives a successful confirmation. Separately, Google Analytics stays off unless you choose “Allow analytics”. Your analytics choice does not affect the site or email signup, and you can change either choice at any time.

Privacy contact

For questions about this notice or to exercise your data-protection rights, email contact@qanvi.io.

What we collect, and why

The signup form asks for your email address so we can send the confirmation message and, if you confirm, a small number of meaningful launch and early-access updates. When you confirm, we also record the confirmation time, the consent wording and its version as evidence of consent. The current statement is “I want Qanvi launch and early-access updates: sparse, meaningful messages, not a general newsletter.” (version 2026-07-14.v1). We ask for no name or phone number and create no account. Giving us an email address is optional. If you do not submit and confirm it, you simply receive no launch or early-access updates; there is no other disadvantage.

The legal basis for launch and early-access messages is your consent (Art. 6(1)(a) GDPR, where the GDPR applies). Processing your address for the one requested confirmation message and keeping minimal proof of that request serve our legitimate interests in verifying consent and preventing an unauthorised signup (Art. 6(1)(f) GDPR). To verify it, submitting the form sends you one confirmation email, without creating a pending list contact. Its token is placed after #confirm= in the link, so it is not sent to the page server when the link opens. Clicking “Confirm my email” is the final action: when the linked page opens, it sends that token in a browser same-origin JSON request, creates or safely completes your contact, and records the consent evidence. Form submission alone never subscribes you. Some email-security tools can open links in a browser; if your address is ever confirmed unexpectedly, use the unsubscribe link in any update or contact us and we will remove it.

You can withdraw consent at any time: every launch or early-access email we send carries an unsubscribe link, and writing to contact@qanvi.io (or simply replying to any of our emails) works too. Withdrawing is as easy as signing up and does not affect processing already lawfully carried out before withdrawal. A minimal suppression record may remain on the basis of our legitimate interest in honouring your choice and, where applicable, a legal obligation (Art. 6(1)(f) and (c) GDPR).

To avoid revealing whether an address is already on a list or suppression record, the form's accepted response is deliberately noncommittal. An already-confirmed or globally unsubscribed address is not sent another confirmation. We never reverse a global unsubscribe through this form; verified re-enrolment is handled manually through contact@qanvi.io.

To protect the form from abuse, the server reads your network address (IP) when you submit, immediately converts it to a process-salted one-way key, and keeps only that key in a short in-memory rate window. We never place the raw address in the limiter, store it with your email, or persist it in an application database. Like any host, our hosting provider processes connection data (including IP addresses) transiently in its infrastructure logs to serve and protect the site. This limited security processing is based on our legitimate interest in keeping the site reliable and preventing misuse (Art. 6(1)(f) GDPR). We do not use it to profile visitors.

Optional website analytics

With your consent, we use Google Analytics 4 (measurement ID G-3EC7ESKPXC), provided by Google Ireland Limited, to understand how the public teaser is used and improve it. We send a sanitized page path and title and, where available, only the referring site's origin. We also measure reaching the page's scroll threshold, clicks on links that leave Qanvi (including the destination URL and domain), and two funnel steps:interest_submitted once per browser-tab session after a capture request succeeds and interest_confirmed when a new confirmation succeeds after its token has been removed from the address bar. Beyond the same sanitized page context, these events contain no action-specific properties or direct identifiers. The submission event records intent; it does not prove that an email was newly sent or that the address is a new subscriber. Google Analytics also derives browser and device information, timestamps, approximate location, and a random client identifier. Google receives the network address (IP) needed to route the request and derive approximate location; Google states that it discards the address before logging it. We strip query parameters and URL fragments from the viewed-page location and referrer. We do not send Google your name, email address, form contents, confirmation token, Qanvi account or CRM identifier, or free text. Automatic user-provided data collection, Google Signals, Ads/product links, remarketing, browser-history page views, automatic form interactions, site search, video engagement, and file-download measurement are off. Enhanced Measurement is limited to scrolls and outbound links. Qanvi explicitly sends a sanitized page view for each viewed public page; GA4 may also generate its standard first-visit, session-start, and engagement events. Those events can include session statistics and browser or device settings such as language and screen resolution, using the same sanitized page context.

The Google tag remains blocked unless you choose “Allow analytics”. If you decline or make no choice, no analytics data is sent to Google, and the site and signup remain fully available. This analytics choice is separate from consent to receive launch and early-access emails. Its legal basis is your consent (Art. 6(1)(a) GDPR, where the GDPR applies). We store the choice locally in your browser until you change it, clear this site's browser data, or we replace this consent version. After consent, Google Analytics may set first-party _ga and _ga_* cookies. Each cookie is capped at 395 days from creation, and later visits do not extend that particular expiry; a later consented visit after expiry may create a new cookie.

You can withdraw or change analytics consent at any time through Analytics settings. Withdrawal disables future analytics and removes the Google Analytics cookies visible to this site; it does not affect processing already lawfully carried out before withdrawal. Fonts remain served from our own domain. Resend open and click tracking remains disabled: the analytics choice does not add pixels or tracked redirects to email.

Who helps us process it

Vercel hosts the site, and the signup function is configured to run in Frankfurt. Resend processes the confirmation message and, after confirmation, holds the launch-and-early-access contact, its segment and topic subscription, confirmation timestamp, and the consent wording and version. If your address is already a globally active Resend contact that needs Topic consent or re-consent, Resend also stores a one-way challenge value: it binds that consent to the newest confirmation link, without storing the link's token. Teaser subscriptions are not copied into our CRM. A later, deliberate request for early access or a conversation may be recorded there as a separate relationship.

Vercel and Resend are US providers and may use disclosed subprocessors in other countries. Their processing terms include data-processing obligations and the EU Standard Contractual Clauses for covered international transfers; we apply equivalent Swiss safeguards where required. You can request information or a copy of the relevant safeguards by writing to contact@qanvi.io. We sell nothing and do not disclose your address for anyone else's marketing.

If you allow analytics, Google Ireland Limited processes the analytics data described above and may involve Google LLC and infrastructure in the United States and other countries. Its data-processing terms include Standard Contractual Clauses where applicable. Read Google's privacy policy, how Google uses information from sites using its services, and Google's data-processing terms. No Google Analytics data is combined with the Resend launch list by this site.

How long we keep it

We create no pending list contact for a previously absent address. Resend may retain the confirmation message and delivery records for the period needed to deliver, secure and troubleshoot the message and meet applicable legal obligations under its operational retention rules. We do not use an unconfirmed address for launch or early-access updates or select a longer retention period for it. For an existing globally active contact, the one-way challenge value may be stored before confirmation solely to bind the newest link; a later request overwrites it and it is removed when the contact is deleted. A global unsubscribe is never reversed automatically and we do not send another confirmation into that suppression; verified re-enrolment is handled manually through contact@qanvi.io. Unsubscribing stops launch and early-access messages, but Resend may retain a minimal suppression record so that we do not email you again.

We keep a confirmed contact while the Qanvi launch and early-access programme is active and you remain subscribed. We review the list at least annually and delete inactive confirmed contacts no later than 24 months after our last launch or early-access message, unless a separate active relationship or a legal obligation requires longer retention. A minimal suppression record may remain for as long as we could otherwise send these messages, or longer where needed to establish, exercise or defend legal claims. We review suppression needs at least annually and remove the record when it is no longer necessary to honour the opt-out or meet an applicable obligation.

We handle erasure requests across the systems where the data is held, without undue delay and subject to legal and suppression-record needs. A confirmation link is valid for up to seven days, so safely deleting a contact may require invalidating outstanding links first or retaining only the minimal suppression until they expire. We then delete data that no longer needs to be retained.

Google Analytics user- and event-level data is configured for a two-month retention period, without resetting that period on new activity; aggregated reporting may remain available for longer. Each first-party analytics cookie is capped at 395 days from its creation and later visits do not extend its existing expiry. Withdrawing consent stops future collection. Contact us if you want us to address analytics data already collected, subject to the identifiers and deletion tools available in Google Analytics.

Your rights

Swiss data-protection law (the FADP) applies to our processing in Switzerland. Depending on the circumstances, you can ask what data we hold about you, have inaccurate data corrected, request deletion or delivery of your data, and object to processing. If the GDPR applies, you may also have rights to restriction, portability and to lodge a complaint with your local supervisory authority. Write to contact@qanvi.io and we'll act on your request subject to applicable exceptions. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Legal notice

Contact: contact@qanvi.io

Qanvi is currently pre-launch and is not a bank or financial institution. No financial product or service is offered through this website.

Changes

If what this site collects changes, this page changes first, with a new date at the top. Before using your address for a materially different or incompatible purpose, we will notify you directly and obtain fresh consent where required; a silent privacy-page edit will not expand the consent you gave here.