Privacy Policy
Last updated: August 2026
This Privacy Policy explains what personal data we collect through this site, why we use it, how long we keep it, and what rights you have over it.
What data we collect
Depending on the form you use on the site, we may collect: through the contact form — your name, your company (if you choose to provide it), your email address, and the content of your message; through the waitlist form — only your email address. To protect our forms from spam and abuse, we may also temporarily process the IP address associated with a submission, along with the date and time of the request. We do not ask for data through our forms that isn't needed for the purposes described below.
Why we use this data
We use the data we collect to respond to messages and requests sent through the contact form, to reach out to people on the waitlist when the service or feature they signed up for becomes available, to prevent spam, abuse, or automated and excessive form submissions, and to keep the site secure and functioning properly. We do not sell personal data and do not use it for advertising or profiling beyond the purposes described in this policy.
IP address and spam prevention
To protect our forms from spam, abuse, and automated submissions, we may temporarily process the IP address associated with a submission, along with the date and time of the request. This information is used solely to apply submission limits and to detect and prevent abuse of our forms. It is kept for a maximum of 48 hours, after which it is automatically deleted. We do not use this information for advertising, profiling, or marketing.
Legal basis for processing
We process personal data in accordance with applicable data protection law, including the General Data Protection Regulation (GDPR). Depending on the situation, processing is based on the steps needed to respond to a request you've made, our legitimate interest in keeping the site secure and preventing spam, fraud, and abuse, or your consent, where consent is required for a specific processing activity.
How long we keep your data
Data submitted through the contact form is kept for as long as needed to handle and resolve your request, and, where appropriate, for a reasonable period afterward for record-keeping purposes. Email addresses on the waitlist are kept until the relevant service or feature launches, or until you request that your address be deleted. Data used for spam prevention, including IP address and submission time, is kept for a maximum of 48 hours and then automatically deleted. We may keep certain data for longer periods where necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.
Providers and third-party services
To run the site and process data submitted through our forms, we use services provided by third parties, including Supabase (storing and managing data submitted through forms), Resend (sending emails generated by form submissions), and Vercel (hosting the site). These providers may process data on our behalf only to the extent necessary to provide their services. We do not allow them to use data from our forms for their own marketing purposes.
Who has access to your data
Access to data is limited to people who need it to administer the site, manage requests, and provide the related services. We take reasonable measures to protect data against unauthorized access, loss, alteration, or disclosure.
Your rights
Under GDPR, you have the right to request access to your personal data, rectification of inaccurate data, erasure of your data, restriction of processing, and to object to certain processing, the right to data portability where applicable, and the right to withdraw your consent for processing based on consent. You can contact us at any time to exercise these rights, and you also have the right to lodge a complaint with the competent data protection authority.
Cookies and similar technologies
This site may use cookies or similar technologies necessary for the site to function and stay secure. If we use analytics, advertising, or other technologies that require your consent, we will provide the necessary information and choices in accordance with applicable law.
Changes to this policy
We may update this Privacy Policy when we change how the site works, the services we use, or how we process data. The current version will always be available on this page, along with the date it was last updated.
Contact
For questions about this Privacy Policy or to exercise your data protection rights, you can reach us at tflowpilot@gmail.com.