Privacy Policy

Last updated: April 2026  ·  Effective: April 2026

This Privacy Policy explains how TechBench ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit techbench.it or sign up to our waitlist or platform.

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and applicable Italian data protection law.

1. Who We Are

TechBench is an online IT career development platform operated from Italy. We are the data controller for all personal data collected through techbench.it.

2. What Data We Collect

We collect only what is necessary for the operation of our platform. Depending on the stage of your interaction with TechBench, this may include:

• Email address — when you sign up to the waitlist or create an account
• Signup timestamp and consent record — the date, time, and confirmation of your consent
• Account credentials — a hashed password stored securely; we never store passwords in plain text
• Progress data — lessons completed, quiz scores, and tier status within the platform
• Payment data — processed exclusively by Stripe; we do not store card details
• Statistical data — country of residence, native language, and professional background, collected voluntarily during onboarding for the purpose of platform improvement

We do not collect sensitive personal data as defined under GDPR Article 9 (health, ethnicity, religion, etc.). We do not use tracking or advertising cookies.

3. Legal Basis for Processing

• Consent (GDPR Art. 6(1)(a)): For waitlist signup and optional statistical data collected during onboarding. You may withdraw consent at any time.
• Contract performance (GDPR Art. 6(1)(b)): For processing necessary to deliver your subscription, including account management and progress tracking.
• Legitimate interests (GDPR Art. 6(1)(f)): For security, fraud prevention, and platform improvement, where these interests are not overridden by your rights.

4. How We Use Your Data

• To operate your account and deliver access to the platform and content you have subscribed to
• To send transactional emails — account confirmation, password reset, subscription receipts
• To send a launch notification email to waitlist members when the platform goes live
• To process subscription payments via Stripe
• To track your learning progress and quiz performance within the platform
• To improve the platform using aggregated, anonymised usage data

We will not send marketing emails or newsletters without your separate, explicit consent. We will not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Third-Party Processors

We use the following third-party services, each acting as a data processor under our instruction and bound by appropriate data processing agreements:

• Brevo (Sendinblue SAS) — email delivery and contact list management. EU data storage.
• Supabase — database and authentication infrastructure. EU region (Ireland, GDPR compliant).
• Stripe — payment processing. Stripe is PCI-DSS compliant. We do not store payment card data.
• Netlify — website hosting and delivery.

We do not share your data with any other third parties.

6. Data Storage and Security

All personal data is stored on servers located within the European Union. We use HTTPS encryption on all pages, EU-based data residency across all services, and access controls to limit who can view your data. Passwords are hashed and never stored in plain text.

7. Data Retention

• Waitlist contacts: Until you unsubscribe, or until 12 months after the platform launches — whichever comes first
• Platform accounts: For the duration of your active subscription, plus 90 days following account closure to allow for dispute resolution
• Payment records: Retained for 10 years as required by Italian fiscal law
• On deletion request: All personal data deleted or anonymised within 30 days, except where retention is required by law

8. Your Rights Under GDPR

You have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at garanteprivacy.it.

9. Cookies

Our pre-launch landing page uses no tracking, advertising, or analytics cookies. A single essential session cookie may be used to ensure the signup form functions correctly. The full platform uses only technically necessary cookies for authentication and session management. No third-party advertising or tracking cookies are used at any stage.

10. Changes to This Policy

We may update this Privacy Policy as the platform develops. The updated version will be posted on this page with a new effective date. For material changes, we will notify active users by email.

11. Contact

For any privacy-related questions or to exercise your rights:
[email protected]
TechBench — Italy