Privacy Notice

Who we are

End Cancer is run by Josip Gajšak and Gergő Gulyás, who are the joint controllers of the personal data described here. You can reach us at [email protected]. Once the project has its own domain and inbox, this contact will be updated.

What we collect and why

We only collect what we need for each thing you do on the platform:

• Waitlist: your email address and the stakeholder group you identify with — so we can email you when we launch.
• Your account: email, a password (stored hashed by our authentication provider), your name, your role, and an optional LinkedIn URL — so you can sign in and we know who you are.
• Your profile / questionnaire: the answers you give about your organisation or work (for example company name, website, focus area, stage, country, team, and links you choose to share) — so we can build your profile and, once approved, list you in the catalogue.
• Introduction requests: your name, email, and message — so we can pass your request to the member you want to reach.
• Pitch applications: your video link, category, and any context you add — so we can run the pitch competition.
• Technical data: a small first-party cookie that keeps you signed in, privacy-friendly usage statistics (see “Cookies” below), and error reports that are scrubbed of personal data — so the site works and we can fix problems.

Our lawful bases

We rely on your consent for the waitlist and for listing your profile in the public catalogue (you can withdraw it any time); on performance of a contract to operate the account and services you sign up for; and on our legitimate interests in keeping the platform secure and working. We do not sell your data or use it for third-party advertising.

Who can see your data

Most of what you submit is private to you and the two of us. The exception is your profile once it is approved: it appears in the catalogue in tiers — some fields are public, some are visible only to signed-in approved members, and some are never shown. You choose what goes in, and you can ask us to unlist you at any time. Introduction requests are shared only with the specific member you ask to reach.

Where your data lives (our processors)

We use a small number of trusted providers to run the platform:

• Supabase — database and authentication, hosted in the EU.
• Vercel — application hosting.
• Resend — sending transactional email (for example confirmations and notifications), once enabled.
• Plausible — privacy-friendly, cookieless usage statistics, if enabled.
• Sentry — error monitoring, configured to strip personal data before it is stored.

How long we keep it

We keep waitlist emails until you ask us to delete them, or until 90 days after we launch — whichever comes first. We keep account and profile data for as long as your account is open; if you ask us to delete your account, we remove it (see your rights below). Introduction requests and pitch applications are kept for the duration of the relevant event or conversation and then cleared.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, export it, or stop a particular use of it. To exercise any of these, email [email protected] — we will action it within 30 days (usually much sooner). You also have the right to complain to your local data protection authority.

Cookies

We use only one essential first-party cookie to keep you signed in. We do not use advertising or tracking cookies. Our usage statistics (Plausible, if enabled) are cookieless and do not identify you — so we do not show a cookie consent banner.

Children

The platform is intended for professionals and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes to this notice

We will update this notice as the platform grows and post the new “last updated” date above. This notice is written in plain language and is not legal advice; we will formalise it further as we handle more real user data.