Privacy policy

Last updated: 15 October 2026

1. Who is responsible

Shiyang Yue (Invertible), Obere Karspüle 12, 37073 Göttingen, Germany. Email: hello@invertible.dev

2. Visiting the website

When you open the site, our hosting provider processes technical data (IP address, date and time, requested page, browser and device information) to deliver the site and protect it against abuse. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). We do not use tracking or advertising cookies.

3. Waitlist

If you join the waitlist, we store your email address, the consent text you agreed to, the time of consent and confirmation, and which form you used. We then send you one email with a confirmation link (double opt-in). Only after you confirm do we send launch news and occasional product updates. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by replying to any email or writing to hello@invertible.dev; we then delete your address. Unconfirmed sign-ups are deleted after 30 days.

4. Contact form and email

If you contact us via the form or by email, we process your name (optional), email address and message to answer you. Legal basis: our legitimate interest in replying to enquiries (Art. 6(1)(f) GDPR), or steps towards a contract if your request concerns one (Art. 6(1)(b) GDPR). Form messages are deleted automatically six months after they arrive.

5. Service providers

• Vercel Inc. (USA) — hosting. Requests are processed in the EU (Dublin) where possible.
• Supabase Inc. (USA) — database. Waitlist and contact-form data are stored in the EU (Ireland).
• Resend (Plus Five Five, Inc., USA) — sending the confirmation and update emails.
• Cloudflare, Inc. (USA) — domain name system (DNS).

We have data processing agreements with these providers. Where data may be transferred to the USA, the transfer relies on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.

6. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability (Art. 15–21 GDPR). You can also lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für den Datenschutz Niedersachsen.

7. Changes

We will update this policy when we add features such as user accounts or analytics.