Privacy policy

01 Who controls your information

Hibrido is operated by Everseed Ventures, based in Calgary, Alberta, Canada. Everseed Ventures is the controller of the personal information collected through this site. A mailing address for service of legal process is available on written request.

You can reach us about anything on this page at team@everseedventures.com.

02 What we collect

If you use the signup form, we store your email address, the language you signed up in, the page you signed up from, the date and time, and an identifier for the version of the consent text you agreed to.

We do not ask for your name and we do not store one. We do not use analytics or advertising trackers, and nothing on the public site profiles you or follows you to another site.

The public site sets one cookie, and only if you ask it to. Choosing light or dark from the control in the header stores that choice in a cookie named hibrido-theme, which holds the single word light or dark and is read for one purpose: to show you the page in the theme you picked. It is strictly functional — no identifier, no analytics, and shared with nobody. If you never touch that control, no cookie is set for you at all. The only other cookie this site sets is a sign-in cookie for our own staff dashboard, which is never set for a reader.

When you submit the signup form we briefly store the IP address the request came from, so that the form cannot be used to flood our list. Those records are used for nothing else, are never attached to your address, and are cleared automatically: whenever the form is used, anything older than 24 hours is deleted.

03 Why we collect it, and on what basis

We collect your address for one purpose: to send you the daily workout by email once that begins. Nothing is sent today. If we decide not to launch the newsletter, we will delete the list rather than find another use for it.

Our basis for holding it is your consent, given when you submitted the form — Article 6(1)(a) of the GDPR and the equivalent provisions of the LGPD in Brazil and of PIPEDA and Alberta's PIPA in Canada. You may withdraw that consent at any time, and withdrawing it is as easy as giving it. Because we are a Canadian sender, Canada's anti-spam legislation (CASL) also applies to anything we eventually send, and the record of your consent exists so that we can honour it.

The brief IP record described above is kept on the basis of our legitimate interest in keeping the form working for everyone.

04 Who else touches it

Our database is hosted by Supabase and the site is served by Vercel. Both process this information on our instructions and for no purpose of their own.

We do not sell your information, we do not share it with advertisers, and we do not trade it with anyone. If that ever changes, it will be because you were asked first.

05 Where it is stored

We are a Canadian company using service providers whose infrastructure is located outside Canada, including in the United States and the European Union. Your information may therefore be processed in a country other than the one you live in, and may be accessible to the authorities of that country under its own laws.

Where information about people in the European Economic Area or the United Kingdom leaves that area, it is transferred under the European Commission's standard contractual clauses.

06 How long we keep it

We keep your address until you ask us to remove it, or until we decide not to launch the newsletter — whichever comes first. There is no other schedule and no archive copy.

The short-lived IP records described in section 02 are deleted once they are more than 24 hours old, the next time the form is used. We have not put a scheduled job behind that, so on a quiet week the last few can sit a little longer — which is why we are describing the mechanism rather than promising a deadline.

07 Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, ask for a copy of it, or withdraw your consent. There is no form and no account to log into: write to us and we will do it.

We answer within 30 days. Write to team@everseedventures.com.

If you think we have handled your information badly, you can complain to a regulator: the ANPD in Brazil, your national data protection authority in the European Union, the Information Commissioner's Office in the United Kingdom, or the Office of the Privacy Commissioner of Canada.

08 How we protect it

The list is not readable from the public site. It is held in a database with row-level security enabled and no public read access, reachable only by our own server, and visible only through a dashboard behind a password.

No system is perfect, and we would rather say that than imply otherwise. If we ever lose control of this information we will tell the people affected and the relevant regulator, as the law requires.

09 Children

This site is written for adults. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us an address, write to us and we will delete it.

10 Changes to this policy

If this policy changes we will change the date at the top of it. We keep a record of which version of the consent text each person agreed to, so a change here does not silently rewrite what you agreed to then.

11 How to contact us

Everseed Ventures, Calgary, Alberta, Canada. team@everseedventures.com.