Privacy Policy

1. Data Controller

Failradar is operated by its founder based in Saudi Arabia. For privacy inquiries, contact us at privacy@failradar.io.

No Data Protection Officer (DPO) is currently appointed, as the scale of data processing does not require one under applicable regulations.

2. Data We Collect

When you subscribe to the Failradar newsletter, we collect:

• Email address — to send you the newsletter
• Signup source — which page you subscribed from (e.g., landing page)
• Consent timestamp — when you checked the opt-in checkbox

Your IP address is used for rate limiting to prevent abuse but is not stored persistently.

3. Legal Basis for Processing

We process your email address based on your explicit consent (GDPR Article 6(1)(a)). You provide consent by checking the opt-in checkbox on the newsletter signup form.

4. Purpose of Processing

Your email address is used solely to send the Failradar weekly newsletter about startup failure analysis. We do not use your email for profiling, automated decision-making, or any purpose other than newsletter delivery.

5. Third-Party Processors & Cross-Border Transfers

Your data is processed by the following third-party service providers, all located in the United States:

• Beehiiv — email delivery
• Supabase — data storage (PostgreSQL)
• Vercel — website hosting

By subscribing, you consent to your personal data being transferred to and processed in the United States. These transfers are conducted under standard contractual clauses and/or the explicit consent you provide at signup.

6. Data Retention

Your email address is stored while your subscription is active. If you unsubscribe, your email is deleted within 90 days. Consent metadata (timestamp and consent text version) is retained for 3 years to comply with anti-spam legislation record-keeping requirements.

7. Your Rights

Under applicable data protection laws (including GDPR and Saudi PDPL), you have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Restriction of processing — request that we limit how we use your data
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing of your data
• Lodge a complaint — file a complaint with your local data protection supervisory authority

8. How to Exercise Your Rights

• Unsubscribe: Click the unsubscribe link in any newsletter email
• Erasure, access, or other requests: Email privacy@failradar.io

9. Is Providing Your Data Required?

Providing your email address is entirely voluntary. The only consequence of not providing it is that you will not receive the Failradar newsletter.

10. Automated Decision-Making

We do not perform automated decision-making or profiling based on your newsletter subscription data.

11. Contact

For any privacy-related questions, contact privacy@failradar.io.