Privacy Policy

Last updated: 11 November 2026 · Compliant with the EU GDPR

1. Who is responsible

The data controller is Corbenic AI. For any privacy question or request, contact [email protected].

2. What we collect

Profile: your name, email, company, role (startup/investor), one-liner, sectors, stage, goals, languages and what you’re looking for.
Badge verification: your Web Summit attendee ID from the badge QR, and a photo of the badge taken during the scan.
Activity: who you were matched with, call ratings and feedback, and leaderboard points.

3. Why we use it, and our legal basis

To run the matchmaking and video service — legal basis: performance of a contract (the service you asked for).
To confirm you’re a Web Summit attendee — legal basis: contract / our legitimate interest in a genuine-attendee network.
To share your name, email and company with event partners for a single contact — legal basis: your explicit, optional consent. This is off unless you tick the partner box, is never required to register, and you can withdraw it anytime.

4. Partner sharing — optional and refusable

We only share your name, email address and company/startup details with event partners if you actively opt in. Partners may use them to contact you once about relevant opportunities. If you don’t opt in, your details are never shared, and you can still use every part of StormySummit. You may withdraw consent at any time by emailing [email protected]; withdrawal doesn’t affect sharing that already happened.

5. Who else sees your data

People you are matched with see your profile, and — only on a mutual thumbs-up — your contact details. We host on AWS (EU, Stockholm region) and use Cloudflare for delivery; badge verification checks your ID against Web Summit. We never sell your data.

6. How long we keep it

Badge photo: deleted on verification, or within 48 hours after the event — whichever comes first (7-day automatic backstop).
Profile & activity: kept for the event and a short period after to run the leaderboard and follow-ups, then deleted or anonymised.

7. Your rights (GDPR)

You can ask to access, correct, delete, export or restrict your data, object to processing, and withdraw any consent — email [email protected]. You also have the right to complain to your national data protection authority (in Portugal, the CNPD).

8. Security

Traffic is encrypted (HTTPS), badge images are stored privately and auto-expire, and access is limited. No peer-to-peer video is recorded by us.