How we collect and use your personal data.
Conformity Guru operates the website conformity.guru. We are the data controller for the personal data described in this policy. For any questions, contact us at info@conformity.guru.
We collect personal data through one channel only: the beta access request form. When you submit the form, we collect:
We use this information solely to evaluate your beta access request and to contact you about it. We do not use it for marketing purposes, and we do not pass it to anyone for their own purposes.
To deliver your request to us we rely on Resend (Plus Five Five, Inc.), the service that actually sends the email: it receives what you entered in the form, because that is the content of the message, and acts as our processor without being able to use it for its own purposes. Resend is based in the United States and carries out its processing operations there: the transfer is governed by the European Union's Standard Contractual Clauses (Module Two, controller to processor) incorporated in its data processing addendum, and Resend is additionally certified under the EU-U.S. Data Privacy Framework.
The legal basis for processing your data is your consent, which you give by voluntarily submitting the beta access form. You may withdraw your consent at any time by writing to info@conformity.guru.
We retain your data for as long as needed to process your request and, if accepted, to manage your participation in the beta programme. If your request is not accepted, we will delete your data within 90 days. You can also ask us to delete your data at any time, regardless of outcome.
We use Vercel Web Analytics, the measurement service built into the platform that hosts this site, to see which pages are visited. It sets no cookies and stores nothing on your device, which is why no cookie banner is necessary.
To tell one visit from another without identifying people, the service derives an identifier from the request — including the IP address and the user agent — and passes it through a hash function. The value used for that hash changes every day, so the same visitor cannot be recognised from one day to the next, or on other sites. We see aggregate figures only: we neither receive nor store IP addresses, and we cannot trace them back to you. The legal basis is our legitimate interest in understanding how the site is used; you may object by writing to us.
Vercel Inc. acts as our processor for hosting this site and for this measurement. We have configured the project on Vercel's Frankfurt region: the functions that handle data — such as the beta request form — run in Germany. That is a setting we chose, not a contractual commitment: Vercel is based in the United States, its primary processing facilities are there, and its terms allow it to process data elsewhere, relying on cloud infrastructure providers (Amazon Web Services, Microsoft Azure and Google Cloud).
For transfers to third countries, Vercel incorporates the European Union's Standard Contractual Clauses (Module Two, controller to processor) into its data processing addendum; those clauses are the safeguard we rely on under Chapter V of the GDPR.
If you are located in the European Economic Area, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@conformity.guru. We will respond within 30 days.
We may update this policy as our service evolves. The current version is always available at conformity.guru/en/privacy. If we make significant changes, we will notify beta users by email.