Privacy Policy

Last updated: 2026-07-24 · Draft — wording pending legal review before go-live

1. What we collect

When you join the C1 waitlist we collect your email address, the submission timestamp, and basic abuse-prevention metadata (IP address, user agent). We do not collect payment or account data at this stage — there is no purchase or sign-in on this site.

2. Why we collect it

Our lawful basis is consent (GDPR Art. 6(1)(a)). Verifying your email confirms the address is really yours; a separate marketing-consent checkbox authorizes us to send the future launch announcement — verification and marketing consent are not bundled.

3. Who processes it

Supabase (database), Postmark (transactional and announcement email), PostHog (privacy-conscious, cookieless-mode analytics), Sentry (error monitoring), and Vercel/Cloudflare (hosting). No subscriber data is sold or shared for advertising.

4. How long we keep it

Unverified signups are deleted automatically after 30 days. Verified signups are kept until you unsubscribe or until the launch announcement is sent, whichever comes first.

5. Your rights

Under GDPR you can request access to, correction of, or erasure of your data at any time. Every email we send carries a one-click unsubscribe link; you can also write to the contact below to exercise any right, including erasure.

6. Contact

support@robot-workshop.org