Privacy Policy

1. Data controller

Dexavita Kft., Pozsonyi Ut. 54, 1133 Budapest, Hungary. Contact: hello@dexavita.com.

2. Data we collect and why

• Waitlist signups — name, email, interest category, language, UTM attribution, and a one-way hash of your IP address. Legal basis: your consent when submitting the form. We use this only to notify you when DexaVita launches and, for gym/corporate/coach interest, to route your message to our partnerships team.
• Authentication — email, password hash, and (if you use social sign-in) your provider's user ID. Legal basis: performance of contract. Only shown to you in your own account.
• Analytics (Plausible) — aggregate, cookieless page-view counts. Plausible does not set cookies or track you across sites. Legal basis: our legitimate interest in understanding site usage.
• Marketing (Meta Pixel + Conversions API) — only if you consent. Sends page views, waitlist conversions, and booking intent signals to Meta Platforms Ireland Ltd. so we can measure the effectiveness of our Facebook and Instagram ads. We send your email hashed with SHA-256, your IP address, user agent, and Meta's own _fbp/_fbc cookies. Data is transferred to Meta servers in the United States under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Legal basis: your consent.
• Email engagement tracking — when you open or click a link in our marketing emails, we record the open and the click on our own servers so we can measure which messages are useful and which to retire. Open tracking uses a 1-pixel image; click tracking redirects through dexavita.com before forwarding to the destination. Transactional confirmations (e.g. signup welcome) include the same mechanisms. You can opt out at any time by clicking the unsubscribe link in any email, or by emailing hello@dexavita.com. Legal basis: your marketing consent (GDPR Art. 6(1)(a)) and our legitimate interest in measuring deliverability for transactional mail.

3. Cookies we set

4. Who else sees your data

Microsoft (hosting of our internal email on Microsoft 365, Ireland), Amazon Web Services (hosting our production servers, Germany/Ireland), Meta Platforms Ireland Ltd. (only if you consent to marketing), Plausible Insights OÜ (anonymous analytics, Estonia), and Cloudflare (bot protection, Ireland). We do not sell your data.

5. How long we keep your data

Waitlist entries are kept until you unsubscribe or for 3 years of inactivity, whichever comes first. Account data is kept as long as the account exists. Analytics data is aggregate and is kept for 2 years. Meta marketing data is retained per Meta's retention policy (max 2 years).

6. Your rights

Under GDPR Articles 15–22 you have the right to access, rectify, erase, restrict, port, and object to our processing of your personal data, plus the right to withdraw consent at any time without affecting the lawfulness of earlier processing. To exercise any of these rights, email hello@dexavita.com. You may also lodge a complaint with the Hungarian Data Protection Authority (NAIH) at naih.hu.