1. Who we are
RackSpot is operated by RackSpot, a company incorporated in Portugal (hello@rackspot.io). We are the data controller for personal data processed through rackspot.io and any associated services.
For any privacy-related queries or to exercise your rights, contact us at privacy@rackspot.io.
2. What data we collect and why
Waitlist and early access form
When you submit the waitlist form we collect:
- Name, company name, job role, work email — to identify you, send access invitations, and follow up about your onboarding
- Number of data center sites — to prioritise design partner cohorts and tailor the product to your scale
Legal basis: Legitimate interest (evaluating product-market fit and onboarding design partners) and, where you consent to marketing, consent.
Product usage data
Once you use the RackSpot platform we collect usage events (features accessed, quote volumes, session duration) to improve the product. This data is linked to your account but is not sold or shared outside our infrastructure and authorised processors.
Communications
We use your email to send:
- Transactional messages — waitlist confirmation, access credentials, product updates directly relevant to your account
- Marketing emails — product news, educational content about data center sales, and occasional commercial communications. You can unsubscribe at any time via the link in any email.
3. Analytics and tracking tools
We use the following tools to understand how visitors use our site and product. These tools may set cookies or use similar tracking technologies.
| Tool | Purpose | Data leaving the EU? |
|---|---|---|
| Google Analytics 4 | Aggregate traffic and conversion analysis | Yes — Google LLC, US (EU SCCs apply) |
| PostHog | Product analytics, funnel and feature usage tracking | Configurable — we use EU-hosted instance where possible |
| Microsoft Clarity | Session recordings and heatmaps to improve UX | Yes — Microsoft Corp., US (EU SCCs apply) |
All analytics data is used solely for improving RackSpot. We do not use it for ad targeting, profiling for sale, or sharing with data brokers. You can opt out of analytics cookies via our cookie banner or by using browser-level controls.
4. Processors and sub-processors
We share data with the following third-party processors who act on our instructions:
- Vercel Inc. — hosting and serverless infrastructure
- Resend Inc. — transactional email delivery
- Google LLC — Google Analytics 4
- PostHog Inc. — product analytics
- Microsoft Corp. — Microsoft Clarity
All processors are bound by data processing agreements. Where data is transferred outside the EEA, appropriate safeguards (Standard Contractual Clauses) are in place.
5. How long we keep your data
- Waitlist submissions — retained for 24 months from submission, or until you request deletion
- Account data — retained for the duration of your account plus 12 months after closure
- Analytics data — per the retention settings of each tool (GA4: 14 months by default; Clarity: 30 days for recordings)
- Email correspondence — retained for up to 3 years for legitimate business purposes
6. Your rights under GDPR
If you are based in the EU/EEA, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten"), subject to legal retention obligations
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest, including direct marketing
- Restriction — ask us to limit how we use your data while a dispute is resolved
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
To exercise any right, email privacy@rackspot.io. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) or the supervisory authority in your country of residence.
7. Cookies
We use cookies for:
- Essential operation — session state, security tokens (no consent required)
- Analytics — GA4, PostHog, Clarity (consent required in the EU)
You can manage cookie preferences via your browser settings or our cookie banner on first visit. Disabling analytics cookies will not affect core site functionality.
8. Children
RackSpot is a business-to-business product intended for professionals. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently done so, contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy as the product and our obligations evolve. Material changes will be communicated by email to active users and noted by a revised "last updated" date above. Continued use of the service after changes constitutes acceptance.
10. Contact
Data controller: RackSpot, Portugal
Email: privacy@rackspot.io