Privacy Policy

1. What we collect

When you join the waitlist, you give us:

• your email address (required);
• the computer you use: Mac, Windows, Linux or other (required);
• which coding agent you use, if you choose to tell us;
• how you heard about us, if you choose to tell us, plus any text you type for "Other".

We create some information as you use the waitlist: when you joined and confirmed, your status (for example confirmed, invited or left), your referral link, who referred you if you joined through a friend's link, how many people joined through yours, the page you signed up from, and whether our emails to you were delivered, bounced or marked as spam. If you're invited, we keep a record of the invite: when it was sent, the last four characters of your invite code, and when it was used.

When you visit the website, our hosting and server providers automatically process technical data such as your IP address, browser type, the page you asked for and the time. We use it to deliver the site, keep it secure and stop abuse (for example, limiting how often one address can submit the form). We don't use it to build a profile of you.

We don't ask for sensitive information. Please don't put any in the free-text field.

2. Cookies and local storage

This website doesn't set cookies and doesn't use analytics, advertising or social-media trackers, so there's no cookie banner.

If you pick Light or Dark in the footer, your browser remembers that choice in its local storage. It stays on your device, is never sent to us, and you can clear it by choosing System or clearing your browser's site data.

If we ever add analytics or other cookies, we'll update this policy first and ask for your consent where the law requires it.

3. How we use it, and our legal basis

We use your information to:

• Run the waitlist you asked to join: confirm your email, show your place in line, count your referrals, and send your invite and the emails that go with it. Legal basis: taking steps at your request before you use our product (GDPR Art. 6(1)(b)).
• Plan our launch: your answers about your computer, your agent and how you found us help us decide which platforms and integrations to build first and where to tell people about Azoto. Legal basis: our legitimate interest in building a product people want (Art. 6(1)(f)).
• Keep the waitlist fair and secure: stop duplicate or fake sign-ups and abuse of the referral program, and protect our systems. Legal basis: legitimate interests (Art. 6(1)(f)).
• Meet legal obligations and respond to lawful requests (Art. 6(1)(c)).

We only email you about the waitlist and your invite. We don't send you marketing newsletters unless you separately agree to them. We don't use your information for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We use a small number of service providers who process data on our behalf, under contract:

• Cloudflare hosts and delivers this website.
• DigitalOcean hosts the servers and database that run the waitlist.
• Resend sends our emails and tells us whether they were delivered.

If someone joins through your referral link, we don't show them your email, and we don't show you theirs. You only see how many people joined.

We may also disclose information if the law requires it, to protect people's safety or our rights, or to a buyer or successor if Azoto is involved in a merger, acquisition or sale of assets. In that case this policy keeps applying to your information.

We don't sell your personal information or share it for cross-context behavioral advertising, as those terms are defined under California law. We have no plans to.

5. International transfers

Azoto is based in the United States, and our providers may process data in the United States and other countries. When we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards the law recognizes, such as the European Commission's Standard Contractual Clauses (and the UK Addendum) in our providers' data processing agreements, or the EU-U.S. Data Privacy Framework where a provider is certified under it.

6. How long we keep it

• If you never confirm your email, we automatically delete your sign-up 30 days after our last email to you.
• While you're on the waitlist, we keep your entry until you're invited and for as long as the beta and waitlist run.
• If you leave the waitlist, we stop emailing you, and your entry is marked as left. We keep it so we respect your choice, don't count you twice if you join again, and keep referral counts accurate. You can ask us to delete it completely (see below).
• Server and security logs are kept only for a short period and then deleted or overwritten.

When we no longer need information for these purposes, we delete it or make it anonymous.

7. Your rights and choices

Leave at any time. Every waitlist email has a link to remove yourself.

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy;
• correct it;
• have it deleted;
• object to, or ask us to restrict, how we use it;
• receive it in a portable format;
• opt out of the sale or sharing of personal information. We don't do either, but we also treat a Global Privacy Control signal from your browser as a valid opt-out request;
• withdraw consent where we rely on it, without affecting what we did before.

To use any of these, email privacy@azoto.app from the address you signed up with. We may ask you to confirm a request from your email address before acting on it. You can also send a request through an authorized agent. We'll reply within the time the law gives us (usually 30 or 45 days), and we won't treat you differently for exercising your rights.

If you're in the EEA, UK or Switzerland and think we've mishandled your data, you can complain to your local data protection authority. We'd appreciate the chance to fix it first.

8. Security

We use HTTPS for the website and the waitlist, keep access to the waitlist limited to the people who need it, and store the links in our emails only as one-way hashes. No method of storing or sending data is perfectly secure, but we work to protect yours and will notify you and the authorities of a breach where the law requires it. To report a security issue, see our security contact.

9. Children

Azoto is for developers and isn't directed at children. You must be at least 16 to join the waitlist, and we don't knowingly collect information from anyone younger. If you believe a child has signed up, email privacy@azoto.app and we'll delete the entry.

10. Changes to this policy

We'll update this page when our practices change and change the date at the top. If a change materially affects how we use information we already have, we'll email the people on the waitlist before it takes effect.

11. Contact us

Questions or requests about privacy: privacy@azoto.app. Azoto Inc. is the controller of the personal information described in this policy.