Privacy Policy

This Privacy Policy explains how personal data is processed on the CoverKit website and waitlist pages hosted on this domain.

Last updated: 14 March 2026

1. Controller

Controller: CoverKit
Website: https://staging.coverkit.com
Contact: hello@coverkit.io

If you have questions about privacy or want to exercise your data protection rights, you can contact us at the email address above.

2. What data we process when you visit the site

When you visit this website, the server may process technical data that is necessary to deliver the site securely and reliably. This may include your IP address, date and time of access, requested URL, referrer URL, browser type, operating system, and similar connection data.

Purpose: website delivery, security, stability, troubleshooting, and abuse prevention.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests in operating a secure website).

3. Waitlist and email updates

If you join the CoverKit waitlist, we process the data you submit through the form. This currently includes:

  • your name (if provided)
  • your email address
  • your confirmation of the privacy checkbox
  • technical signup metadata needed to verify and protect the signup process, such as timestamps and similar confirmation data

We use this data to manage the waitlist, send product updates, onboarding availability, launch-related messages, and other communications related to CoverKit.

Legal basis: Art. 6(1)(a) GDPR (consent).

The waitlist uses a double opt-in flow. After signup, you receive a confirmation email and must confirm your address before being fully added to the waitlist.

You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us at hello@coverkit.io. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. Tools and service providers

This site currently runs on WordPress and uses Mailster to handle the waitlist form and subscription workflow. Personal data may also be processed by hosting and technical service providers that are necessary to operate the website and deliver emails.

We only use service providers where this is necessary to operate the site and communications. We do not sell personal data.

5. Cookies

At the time of writing, the public landing pages do not set analytics or advertising cookies for ordinary visitors.

If you access WordPress login or administration areas, WordPress may set technically necessary cookies, for example to test whether cookies are enabled or to maintain a logged-in session.

If additional cookies, analytics, embeds, or marketing tools are added later, this Privacy Policy should be updated accordingly before public use.

6. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy or to comply with legal obligations.

  • Waitlist and email data: retained while you remain subscribed or while needed for pre-launch and launch communications, unless earlier deletion is requested and no legal retention obligation applies.
  • Consent-related records: may be retained as needed to document consent and comply with legal obligations.
  • Technical logs: retained only as long as necessary for security, stability, and operational purposes, then deleted or overwritten in the normal course of system operation.

7. Your rights

Under the GDPR, you may have the right to:

  • request access to your personal data
  • request correction of inaccurate data
  • request deletion of your data
  • request restriction of processing
  • object to certain processing activities
  • receive your data in a portable format, where applicable
  • withdraw consent at any time where processing is based on consent

If you believe your data has been processed unlawfully, you also have the right to lodge a complaint with the competent data protection authority, including the Austrian Data Protection Authority (Datenschutzbehörde), if applicable.

8. No public comments or user accounts

The public landing pages on this site are currently intended for browsing and waitlist signup. Public comments and public user account registration are not currently part of the normal user flow.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the website, the waitlist process, legal requirements, or the tools we use. The version published on this page is the current version.