halcy

Privacy

Privacy policy

For halcy.site. Effective 11 June 2026.

The short version

This website sets no cookies and runs no analytics or tracking. The only personal data it handles is what you choose to send us: your email address if you join the waitlist, and the details you submit if you apply for a role. That's it.

Who we are

Halcy AB (org.nr 559564-5333), Stockholm, Sweden, is the data controller for personal data collected through this website. You can reach us at [email protected].

This policy covers halcy.site, our public website. The Halcy product (the app) handles personal data under its own terms, shown when you create an account.

What we collect, and why

Waitlist

If you join the waitlist we store your email address and when you signed up. We use it for one thing: telling you when Halcy opens. Legal basis: your consent. We keep it until we've launched and sent that email, or until you ask us to delete it, whichever comes first.

Job applications

If you apply for a role we store what you submit (name, email, LinkedIn URL, optional portfolio link, and your written answers) so we can evaluate your application and reply. Legal basis: taking steps at your request prior to entering a contract. We keep applications for up to 12 months after the role closes, then delete them.

Email you send us

If you email us, we keep the correspondence for as long as needed to handle whatever it's about.

Where it lives

Waitlist and application data is stored with Supabase in the EU (AWS, London region) and email is processed by our email providers under data-processing agreements. We don't sell personal data, and we don't share it with anyone except the service providers that store and deliver it for us.

Your rights

Under the GDPR you can ask for access to, correction of, or deletion of your personal data, ask us to restrict or object to processing, and ask for a copy in a portable format. Email [email protected] and we'll handle it, usually within a few days, always within a month. You can also complain to the Swedish data protection authority (IMY).