Privacy Policy — Expectat

This policy explains what personal data Expectat collects, why, and the choices you have. Expectat is operated by Yakira LLC, which is responsible for your data (the “controller”). Questions? Email hello@expectat.com.

What we collect

Newsletter — your email, when you subscribe.
Contact form — your name, email, optional phone number, the topic and your message.
Strategy-call application — your name, email, phone number, citizenship, country of tax residence, who would relocate with you, what you hope to achieve, your timeline, the rough scale you are working with, and any notes you add.
Your account — your email, when you sign in, the messages you and we exchange in your inbox, and the changes you make to your details.
Bookings and payments — your name, email and timezone when you book a call, and the payment for it, handled by TidyCal and Stripe.
Partner applications — if you apply for a firm, the firm and contact details, licence and regulatory information you submit.
Basic technical data — such as IP address and browser type, handled by our host and by the bot check on our forms, to keep the site secure and fast.

How we use it

To send you the newsletter you asked for (and nothing else).
To read your message or application, reply, and schedule and hold the strategy call.
To run your account: sign you in, show and let you edit your details, and carry our messages.
To keep the records we need, including those the law requires.
To operate, secure and improve the website, and to prevent abuse.

Our legal bases are your request or our contract with you (applications, calls and accounts), your consent (the newsletter), and our legitimate interest in securing the site and keeping business records.

Who processes your data

We use a small set of providers, each handling data under its own terms: Cloudflare (hosting, our database, bot protection), Emailit (emails such as sign-in links and confirmations), Odoo (our customer records, run by us), Telegram (internal alerts to the Expectat team, which can include details from your message or application), SendFox (newsletter), TidyCal and Stripe (bookings and payments), BreezeDoc (signing partner agreements) and Chatwoot (the chat widget). We do not sell your data. Some providers process data outside the EU/EEA; where that happens we rely on the safeguards the provider offers.

Your account and your controls

In your account you can see and edit your details, download a copy of everything we hold about you as a JSON file, and ask us to delete your account and personal data. Deletion requests are confirmed by us, normally within 30 days; we may keep records the law requires, such as invoices. You sign in with a one-time link sent by email, which expires after 15 minutes and works once.

Cookies & analytics

Expectat sets no advertising cookies. When you sign in, one strictly necessary cookie keeps you signed in. Tools we embed — such as the booking calendar — may set their own cookies when you interact with them.

Data retention

We keep newsletter data until you unsubscribe. Applications and account data are kept while you keep your account or we work together, and until you ask us to delete them. Booking and invoice records are kept as long as needed to manage your call and as the law requires. Sign-in sessions last up to 30 days.

Your rights

You can request access to, correction, export or deletion of your personal data at any time, object to how we use it, and unsubscribe from the newsletter using the link in every email. Most of this you can do yourself in your account; otherwise email hello@expectat.com. You may also complain to your data protection authority.

Changes to this policy

We may update this policy from time to time; the date above reflects the current version.