1. Who we are.
OBridge is an early-stage product operated by Aurel Nzeyap, based in Ilmenau, Germany. For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is:
Aurel Nzeyap
Ilmenau, Germany
Email: [email protected]
If you have any question about how your data is handled, write to that address. We will respond within 30 days, as required by Art. 12(3) GDPR.
2. What we collect.
We collect the minimum amount of data needed to operate the OBridge waitlist and to contact you about early access. Specifically:
- Always: your name, email address, and the role you select (founder, investor, or talent).
- If you sign up as a founder: your startup name, stage, sector, and a short one-line description.
- If you sign up as an investor: your firm or fund name, role, typical check size, and investment thesis.
- If you sign up as talent: your LinkedIn URL, what you are looking for, and your availability.
- Optional: how you heard about us.
- Technical: standard server logs from our hosting provider (IP address, user agent, request time) for security and abuse prevention.
We do not use marketing cookies, third-party analytics trackers, advertising pixels, or behavioural profiling. The site uses only technically necessary local storage to remember the form draft on your own device.
3. Why we collect it.
Your data is processed for the following purposes and on the following legal bases:
- To take steps at your request prior to entering into a contract — Art. 6(1)(b) GDPR. Specifically, to manage your spot on the waitlist, contact you when your wave opens, and admit you to the product.
- Our legitimate interest in operating, securing, and improving the service — Art. 6(1)(f) GDPR. This covers things like spam protection and basic log analysis.
We will not use your data for any purpose unrelated to your application without asking you first.
4. Who sees it.
Your data is accessed by Aurel Nzeyap and a small set of trusted processors who help us run the service. Today these processors are:
- Replit, Inc. — application hosting (United States, with EU Standard Contractual Clauses in place).
- Supabase, Inc. — encrypted database storage for waitlist entries.
We never sell your personal data. We never share it with advertisers, recruiters, or third-party investors without your explicit consent.
5. Where it lives.
Waitlist data is stored on infrastructure operated by the processors named above. Some of these providers may transfer data to servers outside the European Economic Area. When this happens, the transfer is covered by an adequacy decision or by EU-approved Standard Contractual Clauses.
6. How long we keep it.
We keep your waitlist entry until one of the following happens:
- You ask us to delete it.
- Twenty-four (24) months pass without OBridge admitting you to the product or hearing back from you.
- OBridge ceases operations.
Server logs are kept for no longer than 30 days unless required for an investigation of abuse.
7. Your rights.
Under the GDPR, you have the right to:
- Request a copy of the personal data we hold about you (Art. 15).
- Have inaccurate data corrected (Art. 16).
- Have your data deleted (Art. 17), subject to legal retention requirements.
- Restrict or object to processing (Art. 18, Art. 21).
- Receive your data in a portable format (Art. 20).
- Withdraw consent at any time, where processing is based on consent.
- File a complaint with your local data protection authority. In Germany, the competent authority depends on your state of residence; a list is published at bfdi.bund.de.
To exercise any of these rights, write to [email protected]. We may ask you to verify your identity before acting on the request.
8. Security.
We use industry-standard technical and organisational measures to protect your data: TLS encryption in transit, encrypted storage at rest, access controls on the database, and the principle of least privilege. No system is perfectly secure, but we treat your data as if it were our own.
9. Changes.
We will update this policy as the product evolves. Material changes will be flagged at the top of this page and, where appropriate, notified to you by email. The "Last updated" date above always reflects the current version.
10. Contact.
Questions, concerns, requests? Write to [email protected]. We read every message.