Last updated: 16 October 2026
This notice explains what happens to the details you give when you join the Venora waiting list. It follows the EU General Data Protection Regulation (GDPR) and Spain's data protection law (LOPDGDD).
Who is responsible
Venora (venora.es) is a project being built in Madrid, Spain. It isn't a company yet. The person responsible for your data (the "controller") is:
- Jannik Thome Crespí, trading as Venora
- NIF: 20551842P
- Privacy contact: admin@venora.es
Venora has no institutional relationship with IE University or any other university.
What we collect
When you join, we store:
- what you're looking for: one or more of "I'm building a startup", "Find a co-founder", "Join a startup or offer my services" and "Follow startups and what they're building";
- your name and your email address;
- a link to your startup (its website or LinkedIn page), if you're building one;
- your LinkedIn profile link, if you choose to add it;
- which version of the consent line you saw, and when you joined and confirmed.
We don't open, check or preview the links you give us; they are stored as you typed them.
To stop automated sign-ups, we also briefly keep scrambled (hashed) versions of your email and IP address, for 15 minutes. We don't keep the IP address itself.
Why, and on which legal basis
We use your details on the basis of your consent (GDPR art. 6(1)(a)), which you give by joining and then confirming through the link we email you:
- To keep you on the list and email you about Venora, for example when it opens. We may choose which of these emails you get based on what you picked. We send no other newsletter or marketing.
- To review who joins: the Venora team may look at your name and links to understand who is interested.
- To plan announcements and ads, using totals only (for example, how many people are building a startup). We never give your details to an advertising platform, and we don't use them to target you personally.
We protect the sign-up form from abuse (the hashed meters above, and the security check below) on the basis of our legitimate interest (GDPR art. 6(1)(f)) in keeping the service safe.
You can withdraw your consent at any time by leaving the list. Withdrawal doesn't affect what happened before it.
Who receives your data
Nobody outside Venora sees your entry. Other Venora members and the public never see it. These providers process data on our behalf:
| Provider | What it does | Where |
|---|---|---|
| Cloudflare, Inc. (Turnstile) | The security check on the form; it receives your IP address and browser signals | Global network; a US company |
| Supabase Inc. | Stores the waiting list | Frankfurt, Germany |
| Vercel Inc. | Hosts the website; keeps short-lived request logs (IP address, browser, time) | Functions in Frankfurt; global edge network |
| Resend | Sends our emails from no-reply@venora.es | EU sending region (Ireland); a US company |
Some of these are US companies, so support or operations access may involve a transfer to the United States. Those transfers are covered by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses, under each provider's data processing terms.
We don't sell your data, and we share it with no one else unless the law requires it.
How long we keep it
- If you don't confirm: your entry is deleted 7 days after you first joined.
- Once you confirm: your entry is deleted 12 months after you confirmed, unless you leave sooner.
- When you leave: everything is deleted at once.
- The hashed meters: 15 minutes.
- Email sending records: a few minutes. They don't contain your address.
- Our providers' own logs (Vercel's request logs, Resend's sending logs) are kept for a short period set by each provider.
Deleted entries may take up to about an hour to disappear from storage, or longer if a cleanup job is delayed. They are never used after their time is up.
The waiting list and Venora accounts
The waiting list is separate from your Venora account. Registering or deleting an account doesn't remove you from the list; use the leave link in any of our emails, or write to us.
Your rights
You have the right to:
- access your data;
- correct it;
- erase it;
- restrict or object to its processing;
- receive it in a portable format;
- withdraw your consent.
The quickest way to leave is the "leave the list" link in any email we send you. It deletes your entry at once.
For anything else, or if you've lost our emails, write to admin@venora.es from the address you joined with. We answer only to that address, so we know it's you. We reply within one month, and exercising your rights is free.
You can also complain to Spain's data protection authority, the Agencia Española de Protección de Datos, at www.aepd.es.
Age
The waiting list is for people aged 14 or over. If we learn that someone under 14 has joined, we'll delete their entry.
Cookies
The waiting-list pages set no analytics, advertising or tracking cookies. The security check (Cloudflare Turnstile) runs only to protect the form. If you've chosen light or dark mode on Venora, a small cookie remembers that choice.
Changes
If we change how we use your details, we'll update this notice. If the change is material, we'll ask for your consent again before it applies.