Draft, pending legal review
Privacy notice for the Platempo waitlist
This notice covers one thing: the Platempo waitlist page you are reading. There is no Platempo account, no app to sign in to, and no product data behind it yet.
What we collect
If you use the waitlist form, we collect your email address and the fact that you ticked the consent box. Nothing else is asked for — no name, no survey answer, no free text field.
Why we collect it
To email you about Platempo: when it opens, and occasionally what we have built in the meantime. That is the only purpose. We do not sell or share the list.
What happens after you submit the form
Nothing is added to any mailing list when you submit the form. We send you one email with a confirmation link. Opening that link does not add you either — it shows you a page with a button, and pressing the button is what adds you. We ask for the press so that an automatic email scanner cannot agree on your behalf. The link works for 24 hours. If you never press the button, you are never added, and the only record of your address is the send log at the provider that delivered that one email.
Who processes it
- Resend delivers the one confirmation email, and any future service email. It is not our mailing list: it holds a send log, not a subscriber list, and we never ask it to send marketing.
- Brevo holds the confirmed waitlist and sends the updates you signed up for. Your address reaches Brevo only after you have opened the confirmation link. Brevo holds the unsubscribe state.
- Cloudflare serves this site, runs Turnstile — the anti-spam check on the form, used to tell a person from an automated script and verified on our server — and routes email sent to our contact address. Cloudflare also stores the small consent record described below.
- PostHog records anonymous page behaviour — which sections were reached, whether the form was started, whether a signup was accepted, whether a confirmation finished. See below.
The consent record we keep ourselves
Between the form and Brevo we keep one small record per address, so that one address cannot be mailed repeatedly and so we can tell a confirmed consent from an unconfirmed one.It does not contain your email address. The address is put through a keyed one-way hash, and the record itself holds only a state — confirmation requested, or consent confirmed — with timestamps. It deletes itself automatically: 25 hours after an unconfirmed request, 30 days after a confirmed one.
Analytics, and what it is not
PostHog runs in cookieless mode on this site. It writes nothing to cookies, local storage or session storage, and it never receives your email address — not in plain text and not as a hash. We do not call PostHog's identify function, we do not record sessions, and we have autocapture switched off, so the only events sent are the small explicit set we listed above.
The confirmation page is measured the same way: it reports only whether a confirmation succeeded or the link had expired. The link's token is never sent to PostHog, and while a token is present in the address bar the page switches analytics off entirely.
Analytics and email consent are separate things. The consent checkbox on the form is about email only. Ticking it does not switch analytics on, and leaving it unticked does not switch analytics off.
How long we keep it
Your address stays on the Brevo list until you unsubscribe or ask us to remove it. The consent record above expires on its own, as described. An address that never completes the confirmation step is therefore never stored by us at all — it remains only in Resend's log of the single email we sent, under Resend's own retention.
We have not set a custom retention window for analytics events in PostHog; they are kept under that project's settings. That is an open question rather than settled policy, and this page will be updated when it is decided.
Removing yourself
Every marketing email we send carries an unsubscribe link, handled by Brevo. Unsubscribing stops the email and adds you to Brevo's suppression list. To have your address deleted outright rather than suppressed, email hello@platempo.com.
Status of this page
This is a draft written against how the site actually works. It has not been reviewed by a qualified lawyer, and it is not a statement that the waitlist complies with the GDPR, the UK GDPR, PECR or any other regime. It will be reviewed before the waitlist is promoted publicly.