Privacy Policy

Last updated: 19 October 2026 · Applies to postroves.com

This notice explains how Postrove uses personal data when you browse this website, join our launch waitlist or contact us.

1. Who is responsible

2. Data we use and why

• Waitlist: your email address, signup date and time, signup source, the wording and version of the consent you give, a private unsubscribe token and delivery status for your welcome email. We use these to maintain the waitlist, send a welcome confirmation and Postrove launch updates, and document your request to subscribe. The legal basis is your consent under Article 6(1)(a) GDPR.
• Website delivery and security: infrastructure and content providers receive your IP address and technical request information, such as browser information, requested resources and request times. Our basis for necessary delivery and proportionate security processing is our legitimate interest in operating a secure, functioning website, Article 6(1)(f) GDPR.
• Messages to support: your email address, message and information you choose to provide. We use these to answer you, on the basis of our legitimate interest in responding to enquiries. When handling GDPR rights requests, we also process information to meet our legal obligations, Article 6(1)(c) GDPR.

Joining is voluntary. You can browse without subscribing. Launch-email consent does not authorise unrelated advertising or partner offers. We do not sell the waitlist.

3. How long we keep data

We use waitlist subscriptions for up to 12 months after signup, unless consent is withdrawn earlier. Expired records are removed by daily cleanup, so removal from the active database may take up to one additional day. The unsubscribe link in our emails lets you remove your active subscription automatically. Opening the link shows a confirmation page; confirming removes the subscription and its queued welcome-email record. Emails already handed to the mail provider may still arrive. You can also email support for removal without undue delay.

Routine support correspondence is kept for up to 12 months after the enquiry is resolved. Information needed for a dispute or legal obligation may be retained longer only where justified. Infrastructure logs and backups follow the relevant provider’s service-specific retention and backup cycles; deleted active records may remain in restricted backups until those backups expire. Such copies are not used for marketing, and deletions must be reapplied if a backup is restored.

4. Hosting, external content and recipients

Supabase hosts the waitlist database in Ireland, AWS region eu-west-1. Cloudflare hosts and delivers the website and provides infrastructure security. These providers and their authorised subprocessors may process data to provide their services.

The page also loads fonts from Google Fonts, JavaScript and styles from unpkg, map tiles from OpenStreetMap, and photos from Wikimedia and Unsplash. Your browser connects to those providers to load the content, which exposes your IP address and technical request information. These requests are separate from submitting your email; we do not intentionally include your waitlist email in them. The interactive map is a demonstration and does not request your device’s GPS location.

External providers’ own processing is described in their notices: Cloudflare, Supabase, Google, unpkg, OpenStreetMap Foundation, Wikimedia and Unsplash. Following a link to Google Maps or Wikipedia opens the respective external service.

We may disclose data where necessary to meet a legal obligation. Google Workspace (Gmail API) sends the welcome email from support@postroves.com. Google processes the recipient address, message content, unsubscribe link and delivery information. Our system does not add tracking pixels or track email opens. Copies of sent messages remain in the Workspace mailbox until deleted under its retention settings; removal requests are also handled for those copies where applicable. Any additional future mailing provider will be described here before use.

5. International processing

The primary database is in Ireland, but this does not mean that all support, infrastructure and content processing stays in the European Economic Area. Supabase describes processing in Singapore and the United States and incorporates EU Standard Contractual Clauses in its data-processing agreement. Cloudflare operates a global network and describes its international safeguards, including Standard Contractual Clauses and applicable adequacy frameworks, in its published terms.

Details are available in Supabase’s transfer information, its data-processing agreement, and Cloudflare’s data-processing agreement. Google Workspace processing is governed by its data-processing terms, including the transfer safeguards applicable to the service. You can contact us for information about safeguards applicable to our processing and how to obtain a copy. Other external content providers describe their processing locations and safeguards in the notices linked above.

6. Withdraw consent or exercise your rights

You can withdraw your launch-email consent at any time, free of charge, using the Unsubscribe button in your email or by emailing support@postroves.com from the subscribed address. A message such as “Unsubscribe me” is enough. Withdrawal does not affect the lawfulness of processing before withdrawal.

Where applicable, you may request access, correction, erasure, restriction of processing or portability. You may object to processing based on legitimate interests and to direct marketing. Send requests to support@postroves.com. We normally respond within one month; GDPR permits extensions for complex or numerous requests, in which case we will explain the extension. We may ask for proportionate information to verify your identity where necessary.

You may complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens, or another competent supervisory authority.

7. Cookies and automated decisions

The landing-page code does not add advertising trackers, analytics scripts or persistent browser storage. Its demo collection is kept only in memory and resets when the page reloads. Hosting and external content providers may process technical information and use service-related cookies under their own policies. This notice is not consent to non-essential tracking.

We do not use the waitlist for profiling or solely automated decisions producing legal or similarly significant effects.

8. Changes

We update this notice when processing changes. We will seek fresh consent where a new purpose requires it.