Privacy policy
Last updated 9 November 2026
This policy explains what personal data Kanooe collects when you join our waitlist or create an account, why we collect it and what your rights are.
Who is responsible for your data
Gustaf Ryborn, Klara Granström and Divya Bansal, based in Stockholm, Sweden, are jointly responsible for your data (joint controllers under GDPR Article 26).
We've agreed that all questions and requests go to hello@kanooe.com. You can also exercise your rights with any one of us.
What we collect
When you sign up we collect:
- your name and email address
- whether you are a founder or a talent
- who you are looking for, or the role you want
- your LinkedIn URL, if you choose to add it
- which form and page you used, and any campaign tags in the link you followed
If you're given access and create an account, we also store:
- a password, which only our login provider keeps, and only in scrambled (hashed) form
- what you add to your profile: for example your location, a short text about you or what you're building, skills, your company, stage or availability, and links to LinkedIn or your website
To keep the site safe we also process some technical data:
- a scrambled (salted and hashed) version of your IP address, for at most 24 hours, so we can limit how many sign-ups and log-in attempts come from one network. We never store the address itself.
- the request logs our hosting provider keeps for a short time, such as IP address, browser type and time of the visit
Why we use it, and our legal basis
- To put you on the waitlist and give you early access. You asked us to, so we process your data to act on that request (GDPR Article 6(1)(b)).
- To email you. You get a confirmation when you sign up and a message at launch, for the same reason.
- To help people find each other. If you add your LinkedIn URL, we may look at your public profile to help founders and talent find relevant people, for the same reason.
- To send the occasional relevant introduction, and to understand where sign-ups come from. This is based on our legitimate interest in building Kanooe (Article 6(1)(f)). You can opt out at any time by emailing us.
- To run your account and help you find relevant people. You asked for an account, so we use your profile to provide it (Article 6(1)(b)).
- To protect the site against abuse. Limits on sign-ups and log-in attempts, and our host's request logs, rely on our legitimate interest in keeping Kanooe and its users safe (Article 6(1)(f)).
How long we keep it
We keep your sign-up until 30 November 2027, unless you create an account or ask us to delete it sooner.
If you create an account, we keep it and your profile for as long as you use Kanooe. You can ask us to delete them at any time. The scrambled IP address is deleted after 24 hours at the latest.
To stop our emails, use the unsubscribe link in any email or write to us, and we'll remove you.
Who handles your data for us
We don't sell your data. These providers process it on our behalf:
- Vercel hosts the website and handles requests to it.
- Supabase stores the waitlist, accounts and profiles, and handles log-in, in Ireland.
- Resend sends our emails, from Ireland.
Some of these providers are based in the United States, so your data may be accessed from outside the EU. In those cases we rely on safeguards such as the EU's Standard Contractual Clauses.
Your browser
We use no advertising or analytics cookies. After you sign up, your browser stores a note that you've signed up, so the site can show that you're on the list. This stays on your device and you can clear it in your browser settings.
If you log in, we set cookies that keep you logged in. They're needed for your account to work, can't be read by other websites or scripts, and are removed when you log out.
Your rights
You can ask us for a copy of your data, and to correct or delete it. You can also object to or restrict how we use it, and ask to move it to another service. Email us and we'll respond within one month.
If you're unhappy with how we handle your data, you can complain to your local data protection authority. In Sweden that's the Swedish Authority for Privacy Protection (IMY).
Changes
If we change this policy we'll update the date above. If a change is significant, we'll tell you by email.