Privacy
This is how otai's waitlist handles your data. It covers this website and the emails we send you for the waitlist, nothing else.
Who is responsible
The controller of your data is [NOME E COGNOME DEL TITOLARE]. For anything about your data, write to [EMAIL DI CONTATTO].
What we collect
- Your email address and the language of the page you used.
- The referral code of the link you came with, if any, and the campaign tags in it (utm_source, utm_medium, utm_campaign).
- Whether you ticked the box for occasional news.
- The answers you choose to give to the five questions on your status page.
- Your place in the queue, and how many people confirmed their email with your link.
- A hashed form of your IP address, used only to limit abuse. We do not store the address itself.
- When it is switched on, a bot check by Cloudflare Turnstile, which receives technical data from your browser to tell a person from a program.
The site sets no cookies. Your browser keeps the referral code and the campaign tags in its session storage until you close the tab, so they survive a switch between English and Italian.
Why, and on what basis
- To keep you on the waitlist, send you your confirmation and your invitation, and work out your place: at your request, art. 6(1)(b) GDPR.
- To send you occasional news about otai, a few emails a year: only with your consent, art. 6(1)(a) GDPR. The box is not ticked by default, and you can withdraw your consent at any time.
- To prevent abuse of the form (the hashed IP and the bot check): our legitimate interest, art. 6(1)(f) GDPR.
Who processes it
- Amazon Web Services EMEA SARL hosts the site and the list and sends our emails. The data stays in an EU region.
- Cloudflare, for the bot check, only when it is switched on.
We do not give your data to anyone else.
How long we keep it
Until otai opens to the public plus 12 months, or until you delete it, whichever comes first. Sign-ups whose email is never confirmed are deleted after 7 days. The hashed IP is deleted automatically after about two hours (two days at most).
Your rights
You can ask for access to your data, for its correction or its deletion, object to its use, and withdraw your consent. Every email we send has a link that deletes everything about you; you can also write to [EMAIL DI CONTATTO]. You can complain to the Garante per la protezione dei dati personali (garanteprivacy.it).
No profiling, no sale, no ads
We do not profile you, sell your data or show you ads. The order of the list comes from the order of sign-up, from the people who confirmed with your link and from whether you answered the questions. No other automated decision is made about you.