Privacy policy

• We collect only what the form asks for, plus where you came from and when.
• We use it to choose and invite alpha testers, and for nothing else.
• We never sell it and never share it for marketing.
• This site sets no cookies and runs no ads. It counts visits without knowing who you are.
• You can see, correct or delete your signup at any time.

When you join the waitlist we store:

• your email address;
• your name (the short form on the first screen asks only for your email);
• your answers to three optional questions: what you would want Holon to handle for you, which two of your apps you would want to talk to each other and why, and how comfortable you are connecting apps and using AI;
• where you came from: the utm_source tag in the link you followed, or else the name of the website that sent you (its address without the page), or nothing;
• the time you gave consent and the version of this policy you agreed to;
• when your signup was created and last changed, and when your confirmation email was sent;
• notes we write ourselves while choosing testers.

Your IP address is not stored. To stop one address from sending the form over and over, the server turns your address into a one-way code (a hash) mixed with a random value that exists only while that server is running, and counts posts against it for one minute. That count lives in the server's memory, is never written to the database and is gone when the server restarts. Our hosting provider and the bot check provider do see your address, as described below.

• To choose who is invited to the Holon alpha, and in what order.
• To send you two emails: one confirming you joined, and later one inviting you when your spot opens. We do not send newsletters. If we ever want to, we will ask you separately first.
• To tell us about your signup: each signup is emailed to our own inbox so we can read it. That copy is kept at the mailbox provider our email is forwarded to.

That is all. We never sell your information, never rent it and never share it with anyone for marketing or advertising.

These services run parts of the site for us. Each receives only what is listed.

• Supabase (database): stores your signup, everything listed above. Supabase privacy policy.
• Vercel (hosting): every visit passes through it, so it receives your IP address, browser details and the pages you request, and keeps request logs under its own policy. The form you send passes through it on the way to the database. Vercel privacy policy.
• Resend (email): sends the confirmation and invite emails, so it receives your email address and the text of each email. It also sends our own copy of your signup, so it receives everything you entered in the form. Resend privacy policy.
• Cloudflare Turnstile (bot check): its script loads with the home page, so Cloudflare receives your IP address and browser details whenever you visit. When you send the form, it checks that you are a person. Cloudflare Turnstile privacy addendum.
• Vercel Web Analytics (visit counts): each page you view is counted with its address up to the path (never anything after it), the website that sent you if it is another site, your country, region and city worked out from your IP address, and your operating system, browser and device type. It also counts whether you played the tour, tried the sample, started the form and joined, with nothing you typed. It sets no cookies. It tells visits apart by a code (a hash) made from your request, which it discards after 24 hours, so it cannot follow you from one day to the next. Vercel Web Analytics privacy policy.
• Namecheap email forwarding: passes the copy of each signup sent to our inbox on to our mailbox provider, so it receives everything you entered in the form.

We may also disclose information if the law requires it, such as a valid court order, or to protect someone's safety.

The database is in the United States. Vercel and Cloudflare answer requests from servers around the world, so a visit may be handled outside the country you are in.

Until the alpha closes, or 12 months after you signed up, whichever comes first. Then we delete it, along with our emailed copy of it. You can have it deleted sooner at any time (below).

• Remove yourself with the link in any email we send you. It deletes your signup from the database at once, without signing in. We are not told when you use it, so the emailed copy in our own inbox stays until the retention period ends; email us and we will delete that too.
• See, correct or delete your signup by emailing nicholas@cmxlogic.com from the address you signed up with. We answer within 30 days.
• Withdraw your consent at any time the same ways. Removing yourself does not affect what was done before.

If you are in the European Union or the United Kingdom, the GDPR and the UK GDPR give you these rights and more, such as getting a copy of your data and complaining to your data protection authority. The legal basis for using your information is your consent, given by ticking the box on the form. If you live in California, the CCPA and CPRA give you the right to know, correct and delete what we hold, and to not be treated differently for asking. We do not sell or share personal information, so there is nothing to opt out of.

This site sets no cookies of its own. The Cloudflare bot check runs in a small frame from Cloudflare, which may keep cookies or browser storage in that frame that it needs to tell people from bots. Cloudflare says these are strictly necessary for detecting and blocking bots. We do not use its optional clearance cookie (cf_clearance). Fonts are served from this site, not from a font service.

Connections to this site are encrypted. The site reaches the database through an account that can only add or complete a signup, read the number of open spots, remove a signup, and delete signups older than 12 months. No system is perfectly secure; if a breach affects your information we will tell you without unreasonable delay.

The waitlist is not for anyone under 16. If we learn that someone under 16 has signed up, we delete their signup.

The effective date and version at the top change with any material edit. Each signup records the version agreed to. If a change would use what you already gave us in a new way, we will ask you first.

Nick Comeaux, Alabama, United States. Email nicholas@cmxlogic.com. See also the terms.