Privacy &
Waitlist Data
We collect only what we need to run the waitlist. No selling, no third-party marketing, no tracking pixels. Here's what we store and how you control it.
What we collect
When you join the waitlist we store:
- email - normalized to lowercase and trimmed, validated with Zod on the server. This is the unique key.
- full_name - optional, only if you complete
/early-access. Stage becomesqualifiedvslead. - source_metadata - UTM params, referrer, and landing path as text. No fingerprinting.
- referral_code - generated server-side for attribution, not PII.
- created_at - TIMESTAMPTZ from Postgres.
We don't store IP addresses with waitlist entries.
How we use it
- Keep your place in line and avoid duplicates. If your email is already there we show success and update
source_metadataif new. - Tell you when early access opens. No newsletter unless you opt in on
/early-access. - See which source brought you here (e.g.,
utm_source=how-it-works) so we know what to focus on.
We do not use your data for model training, ad targeting, or resale.
Storage & Security
Stored in Postgres with row-level security. Accessed through @/db . Data is encrypted at rest and in transit. Backups kept 7 days.
Local JSON fallback when SUPABASE_URL is unset. Never committed. Same Zod schema as prod.
- Bot protection: not active right now. No CAPTCHA and no tracking cookies.
- Validation: Every submission is checked and cleaned up. If you submit twice we still show success so emails can't be probed.
Retention
We keep waitlist entries until launch + 12 months, or until you request deletion - whichever comes first.
- No selling, no third-party marketing lists.
- When you ask to be deleted, we remove your entry and clear the status cookie (
waitlist_stage).
Your rights — plain promises, not legalese
We are a small team building in public. This is not legal advice, but our commitment:
- Access: isn't automatic yet — email us and we'll send what we have.
- Correction: we'll email you a link to send your corrected details.
- Deletion: we'll email you a one-click confirmation link. Clicking it permanently removes your entry immediately - no 24h wait.
Contact: samrseaberg@luci-tech.com or use the form below. No account needed to use these rights.