Privacy Policy

This Privacy Policy explains how Vena Digital collects, uses, and protects your personal data when you visit sempyo.com (the "Site") or join the Sempyo waitlist. We are committed to handling your data lawfully and transparently under the EU General Data Protection Regulation (GDPR) and Dutch law.

Who we are

The controller of your personal data is Vena Digital, a company registered in the Netherlands (Chamber of Commerce / KVK no. 76076032). For any privacy question or request, contact us at hello@vena.digital.

What data we collect

• Information you give us. When you join the waitlist or contact us, we collect your name, email address, website, and any answers or messages you choose to share.
• Referral information. If you invite someone or arrive through a referral link, we process the referrer's first name (and company, if given) to show the invitation, and the invitee's details as described here.
• Information collected automatically. With your consent, we use analytics and session-insight tools to understand how the Site is used, for example pages visited, referring source, device type, approximate (non-precise) location, and how visitors move through and interact with pages (including heatmaps and session replay). None of this runs until you accept cookies.

Why we use your data, and our legal bases

• To run the waitlist and contact you about early access and your pioneer rate, based on your consent and our legitimate interest in launching and communicating about the product.
• To operate the referral program, based on your consent and our legitimate interest in running it.
• To respond to your enquiries and provide support, based on our legitimate interest.
• To measure and improve the Site through analytics and session insights, based on your consent.
• To keep the Site secure and prevent abuse, based on our legitimate interest.

Providing your details is voluntary, but we need them to add you to the waitlist or to reply to you. You can withdraw any consent at any time (see "Your rights").

Cookies

Essential cookies are always on so the Site works. Analytics cookies, loaded through Google Tag Manager (Google Analytics 4 and Microsoft Clarity), load only after you accept them, and we ask before placing any non-essential cookies. You can change your choice at any time using the "Cookies" link in the footer. See our Terms of Service for the rules of using the Site.

Analytics and session insights

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay, which helps us find issues and improve Sempyo. This usage data is captured using first- and third-party cookies and other tracking technologies. We also use Google Analytics 4 for aggregate usage statistics. These tools run only after you accept cookies. For more about how Microsoft collects and uses your data, see the Microsoft Privacy Statement, and for Google, the Google Privacy Policy.

Who we share data with

We do not sell your personal data. We share it only with service providers (processors) who handle it on our behalf under contract, including:

• Supabase, for secure data hosting and our database.
• Google (Tag Manager and Analytics 4), for Site analytics, only with your consent.
• Microsoft (Clarity), for heatmaps and session insights, only with your consent.
• Our email provider, to send you the messages you've asked for.

International transfers

Some providers process data outside the European Economic Area, including in the United States. Where that happens, we rely on appropriate safeguards, such as the EU-US Data Privacy Framework (to which Google and Microsoft are certified) and the European Commission's Standard Contractual Clauses.

How long we keep it

We keep waitlist and contact data for as long as needed to launch and communicate with you, and for a reasonable period afterward, unless you ask us to delete it sooner. Analytics data is retained for a limited period in line with the tools' settings.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected, or incomplete data completed;
• have your data erased;
• restrict or object to how we process it;
• receive your data in a portable format; and
• withdraw consent at any time, which is as easy as giving it.

To exercise any of these, email hello@vena.digital and we'll respond. If you're unhappy with how we handle your data, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or with the data protection authority in your own country.

Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

Children

The Site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Security

We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No method of transmission is perfectly secure, but we work to keep your data safe.

Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version, and significant changes will be made clear on this page.

Contact

Vena Digital, KVK no. 76076032, the Netherlands. Questions about this policy or your data: hello@vena.digital.