Privacy Policy

MAYBE BACK. is a trading brand operated by Francesca Cusani, sole trader. It is not a separate company or legal entity.

Francesca Cusani · P. IVA (VAT) 11420210962 · Via Conca del Naviglio 4, 20123 Milano, Italy.

Email: hello@maybeback.com · PEC: f.cusani@pec.it

When you join the waitlist we store only: your email address, the date and time you joined, the exact consent wording you accepted, and the language of the page you used (English or Italian). This is kept in our own waitlist database as a record of your consent. The same email address, language and consent are sent to our newsletter provider, Mailchimp. When you confirm your sign-up, Mailchimp also records the date, time and IP address of your confirmation.

We do not ask for your name, phone number or any other personal data. Like any website, our hosting providers process your IP address and basic technical data to deliver the pages to you.

To send you news and updates about MAYBE BACK., including when the first journey opens. Legal basis: your consent (Art. 6(1)(a) GDPR).

To keep a record that you gave and withdrew consent. Legal basis: compliance with our accountability obligations (Art. 6(1)(c) and Art. 7(1) GDPR).

Providing your email is optional, but we cannot add you to the waitlist without it. We do not use your data for automated decision-making or profiling.

Consent is given by ticking a box that is unticked by default. You cannot join the waitlist without ticking it. After signing up you receive an email from Mailchimp asking you to confirm. You are only added to our mailing list once you click the confirmation link. If you do not confirm, you will not receive our newsletters.

To protect the website and prevent abuse, we use temporary technical anti-spam measures on the waitlist form. Pseudonymized technical identifiers (non-readable codes derived from your IP address and email address) may be processed to limit automated or repeated submissions. These identifiers are automatically deleted within 48 hours. Legal basis: our legitimate interest in keeping the website secure and preventing abuse (Art. 6(1)(f) GDPR).

You can withdraw consent at any time by clicking the unsubscribe link in any email, or by writing to hello@maybeback.com. Mailchimp stops sending you emails immediately. Our internal waitlist is updated by an automatic daily check, so it may take up to 24 hours for your email address to be removed from it.

To show that consent was given and later withdrawn, we keep only a limited record: the consent wording, your language, the dates of sign-up and withdrawal, and a non-readable code derived from your email address. Mailchimp keeps your address marked as unsubscribed so that you are not emailed again.

Withdrawing consent does not affect anything done before.

If you unsubscribed and change your mind, you can join again at any time through the waitlist form on our website. You will be asked to give consent again and to confirm by email (double opt-in).

Your email address and language are used for marketing until you withdraw consent, and for no longer than 24 months from the date you joined. An automatic daily check enforces this.

After 24 months your record is permanently deleted from our waitlist database, including any limited withdrawal record.

After 24 months your contact is also removed from our active Mailchimp audience and archived. It is not permanently deleted, because permanent deletion in Mailchimp would stop you from joining again through our website. Archived contacts receive no emails. Mailchimp keeps them in its systems under its own policies.

Backups held by our providers are overwritten under their own schedules.

You can ask us at any time to permanently delete your data from both our waitlist database and Mailchimp by writing to hello@maybeback.com. We will do this within one month.

After permanent deletion from Mailchimp, joining again through our website may not be possible. If you would like to join again, please contact hello@maybeback.com and we will help you.

Website platform: Lovable Labs AB (Stockholm, Sweden).

Website delivery: Cloudflare, Inc. (United States), through its global network.

Database: Lovable Cloud, built on Supabase. Waitlist data is stored on Amazon Web Services servers in Ireland (EU).

Newsletter: Mailchimp, operated by The Rocket Science Group LLC, an Intuit company (United States). Mailchimp receives your email address, language and consent, sends the confirmation email (double opt-in), sends our newsletters and handles unsubscribe requests, which are then applied to our waitlist.

We do not use analytics or advertising services.

Our waitlist database is located in the EU. Some of our providers are based in the United States or operate global networks, so some of your data may be processed outside the EEA. These transfers are protected as follows:

Mailchimp (Intuit): the EU-U.S. Data Privacy Framework, with the European Commission's Standard Contractual Clauses as a fallback.

Supabase: the European Commission's Standard Contractual Clauses.

Cloudflare: the European Commission's Standard Contractual Clauses included in its data processing agreement.

Lovable's own providers: the safeguards set out in Lovable's data processing agreement. Data processed in the United Kingdom is covered by the European Commission's adequacy decision.

You can ask for a copy of these safeguards, or more information about them, by writing to hello@maybeback.com.

You can ask to access, correct, delete or export your data, restrict or object to its processing, and withdraw consent at any time. Write to hello@maybeback.com. We reply within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority: Garante per la protezione dei dati personali, www.garanteprivacy.it.