Privacy Policy

1. Data We Collect

We collect the following information when you use this site:

• Waitlist details – your name and email address (required)
• Profile information – investor profile or context (optional)
• Messages – any comments or questions you share with us (optional)
• Session cookies – used for the chatbot and to cap requests (10 messages per session)
• Usage insights – aggregated page views and queries via Google Search Console (no personal identifiers)

2. Legal Basis (GDPR Article 6)

Your personal data is processed on the following grounds:

• Explicit consent when you submit the waitlist form
• Legitimate interest to secure the product experience (session cookies and abuse prevention)

3. How We Use Your Data

Your information helps us to:

• Notify you about Bubble’s launch and roadmap
• Share educational content or product updates if you opt in
• Understand how the site is used so we can improve it
• Comply with legal and regulatory obligations

3.1 Service Providers

Trusted third parties help us run the service:

• Notion – secure storage for waitlist submissions (servers located in the EU/US with GDPR safeguards)
• Google Search Console – anonymised traffic analytics (no personal data stored)

4. Retention Periods

We keep data only as long as necessary:

• Waitlist entries – up to 3 years or until you ask us to delete them
• Session cookies – cleared automatically when you close your browser
• Anonymised usage logs – 26 months (GDPR default)

5. Your GDPR Rights

You can exercise the following rights at any time:

• Access – receive a copy of the personal data we hold about you
• Rectification – correct data that is inaccurate or incomplete
• Erasure – request deletion of your personal data
• Portability – obtain your data in a structured, machine-readable format
• Objection – object to specific processing activities
• Restriction – ask us to limit processing in certain circumstances

To exercise any right, contact us at: [email protected]

6. Cookies

We currently deploy the following cookie categories:

6.1 Essential cookies (no consent required)

• Chat session – caps conversations to 10 messages per session for safety
• Language preference – stores your FR/EN choice so you see the right version

6.2 Analytics cookies (consent required)

We do not run analytics cookies today (Google Analytics is disabled to keep the stack cost-free).

If we activate analytics later, we will request your explicit consent through the cookie banner.

6.3 Managing your preferences

You can update your cookie choices at any time via:

• The consent banner displayed on first visit
• The “Cookies” badge in the bottom-right corner
• Your browser settings (manual deletion of stored cookies)

7. Data Security

We apply technical and organisational measures to safeguard your data:

• HTTPS encryption – all traffic between you and Bubble is encrypted
• Restricted access – only authorised Bubble team members can view personal data
• Secure hosting – data stored on GDPR-compliant infrastructure (Notion)
• Strong authentication – enforced password policies and multi-factor access

8. International Transfers

Your data may transit outside the EU when processed by Notion (United States). These transfers rely on EU Standard Contractual Clauses and supplementary safeguards aligned with GDPR requirements.

9. Policy Updates

We may update this policy to reflect product or regulatory changes. If updates are material, we will notify you by email (if subscribed) or via an on-site banner.

10. Contact & Complaints

Data controller:
Bubble Invest
Email: [email protected]

Supervisory authority:
If you believe your rights are not respected, you can lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés):
www.cnil.fr

11. Children’s Data

Bubble is designed for adults. We do not knowingly collect personal data from individuals under 18. If you are a parent or guardian and believe your child has shared personal data with us, please contact us so we can delete it.