Privacy policy
Last updated: 9 July 2026
1. Who we are
tenweeks.ai is operated by Higher Level Holding BV, registered in the Netherlands (KvK 58110070), based in Broek op Langedijk, North-Holland. Contact: privacy@tenweeks.ai
2. What data we collect on the waiting list
- Email address (required)
- Language preference at signup
- Approximate technical signal: browser language, referring URL, IP address, approximate country derived from IP
- Engagement signal: maximum scroll depth before signup
- UTM parameters if you arrive via a campaign link
- Timestamp of consent and confirmation
3. Why we collect it
- To contact you about tenweeks.ai when the founder's cohort opens (legal basis: consent)
- To understand which channels and markets to prioritize (legal basis: legitimate interest)
- To prevent abuse of the signup form (legal basis: legitimate interest)
4. How long we keep it
- Confirmed signups: until you unsubscribe, or until the waiting list is closed and migrated, whichever comes first
- Unconfirmed signups: 30 days, then deleted automatically
- Unsubscribed signups: email retained for 30 days post-unsubscribe to prevent re-adding, then deleted
5. Who we share it with
- Email delivery: Vimexx (SMTP, Netherlands, EU)
- Analytics: Plausible (cookieless, EU-hosted, no personal data shared)
- Advertising measurement: Meta, but only if you accept the pixel (see section 6). Otherwise we do not sell, rent, or share your data with advertisers.
6. Advertising measurement
We run ads on Meta (Facebook and Instagram). If you accept the advertising cookie in the banner, we load the Meta Pixel, which lets us measure how well those ads work and tells Meta when a signup completes. Meta processes this data under its own privacy policy. The pixel loads only after you accept — if you decline, it never loads and nothing about the site changes.
7. Your rights under GDPR
You can: access your data, correct it, delete it, export it, or withdraw consent. Email privacy@tenweeks.ai for any of these.
8. Cookies
By default we use no tracking cookies: Plausible is cookieless, and the Laravel session cookie required for the form to work (CSRF protection) is essential and not used for tracking. Only if you accept the advertising cookie (section 6) does the Meta Pixel set its own cookie (_fbp); declining means no advertising cookie is ever set.