Privacy notice
Updated 10 October 2026
Alessandro Genovese, Salzburg, Austria, is responsible for the processing described here. For privacy requests, contact info@virgiodiscovery.com. See also our operator information.
Early-access waitlist
We use your email to confirm your signup and send the Virgiò early-access updates you explicitly request. We also save the optional research context you submit, campaign label, consent date and version, and confirmation status. The legal basis is consent (GDPR Article 6(1)(a)). The checkbox is not selected in advance. Without an email and this consent, we cannot add you to the waitlist; research context is optional.
Confirmation links expire after 48 hours. Opening a link alone does not confirm your subscription: you must press the confirmation button. Resend delivers the confirmation email and a notification to the operator after confirmation. The operator notification includes your email and optional research context. No purchase, account or trial starts when you register.
Collaboration enquiries
The collaboration form collects your email, message, request ID, submission date and the label “collaboration / landing footer”. These details let us answer your enquiry and distinguish it from a waitlist signup. Both email and message are required to submit the form. You can alternatively email us. Please avoid sensitive information or details about other people.
We process professional enquiries on the basis of our legitimate interest in answering relevant business correspondence (Article 6(1)(f)); where your request concerns steps towards a contract with you, Article 6(1)(b) applies. Submitting this form does not subscribe you to marketing. The enquiry is stored in the site database and sent to info@virgiodiscovery.com via Resend. If email delivery fails, the stored enquiry remains available to the operator.
Optional website statistics
Since the calm-v12 update on 10 October 2026, page and demo statistics are off by default. You can enable them under “Analytics choices” in the footer and disable them there at any time. This choice lasts for the current page only. No analytics cookie or persistent browser identifier is used by the landing application.
With your consent (Article 6(1)(a)), we record page views, CTA clicks, demo activity and successful signups with a random page identifier and a campaign label. If you submit the waitlist form with analytics enabled, that identifier is saved with your signup. These data are therefore pseudonymous, not anonymous. Counts represent participating page loads, not all visitors or unique people. Turning statistics off stops new optional events and clears the identifier from page memory; earlier processing remains lawful. Email us to request deletion of previously associated data. Earlier versions of the site recorded these events without this optional control.
Forms work regardless of the analytics choice. The type and origin of a form request are still stored to handle that request. We do not use advertising pixels or cross-site profiling.
Hosting, email and security
The site is hosted through OpenAI Sites using Cloudflare Workers and D1. Resend handles email delivery. Only the operator can view submitted details through the site’s results area. Hosting and email providers process technical request and delivery information needed to operate and protect their services. We do not sell submitted details or use this landing’s form data to train an AI model.
The application uses a daily hash derived from the request IP address to limit abusive submissions. A hash is a pseudonymous security identifier, not guaranteed anonymisation; the application does not write the raw IP into the waitlist database. The legal basis for necessary abuse prevention is our legitimate interest in maintaining a secure service (Article 6(1)(f)). Hosting providers may separately process IP addresses in their technical logs.
Providers may process data outside the European Economic Area. Applicable provider agreements and transfer safeguards govern that processing; this notice does not promise EU-only storage. You may ask us for details about recipients and the safeguards applicable to your data. Provider information: OpenAI data processing terms, Cloudflare data processing terms and Resend data processing terms.
Retention
Our retention policy is to review and remove waitlist details within 12 months of signup unless you request earlier deletion or establish a separate service relationship. Unconfirmed registrations are reviewed after 30 days. Collaboration enquiries are reviewed for deletion within 12 months of submission unless an ongoing discussion or contract requires them; legally required records may need longer retention. These reviews are handled by the operator, not an automatic promise of deletion on a particular day.
Optional event records are removed after 90 days when the next event is processed; application rate-limit records are removed after seven days when the next request in that category is processed. Email delivery records and provider logs have separate retention settings, which can be requested from the operator.
Your rights
You can request access, correction, deletion, restriction and, where applicable, data portability. You can object to processing based on legitimate interests and withdraw consent for updates or analytics without affecting processing that already took place. Reply to a Virgiò email or write to info@virgiodiscovery.com; withdrawing from the waitlist is free. You can also complain to your local supervisory authority or the Austrian Data Protection Authority (DSB).
We do not make decisions with legal or similarly significant effects on you through automated decision-making. The landing page’s research demonstrations do not execute research on visitors.