Legal

Privacy Policy

Effective date: 23 July 2026

This Policy explains how we handle information when you visit platho.io, watch or interact with product demonstrations, contact us, or join the pre-launch waitlist. The unreleased Platho product is not currently available through this website, and we do not currently collect user codebases or repository credentials.

1. Scope

This Policy applies to the public Platho website, waitlist, contact form, demo-video interactions, and emails we send in connection with those activities. It does not govern a future Platho beta or production product. Before releasing a product that processes codebases, repositories, user accounts, or additional personal information, we expect to publish updated terms and privacy disclosures.

2. Information we collect

Information you provide

• Email address. Required when you join the waitlist.
• Optional waitlist details. Depending on the deployed form, this may include your role, organization type, general use case, referral source, or a short free-text message.
• Correspondence. Information contained in messages you send us, including replies to Resend emails and support, privacy, or security requests.

Technical and request information

• Network and request data. Internet Protocol address, date and time, requested page or asset, response status, referring page, and similar server or delivery information may be processed by Vercel and other infrastructure or security providers when they serve and protect the website.
• Browser and device information. Browser type, operating system, user-agent string, language, screen or viewport information, and similar technical attributes.
• Campaign information. Referral URLs and campaign parameters, such as UTM tags, when present in the link used to reach the website.
• Abuse-prevention information. Our application may create and store a pseudonymous, one-way representation of an IP address or another limited identifier to rate-limit submissions and detect repeated abuse. We do not intentionally store a raw IP address in the waitlist database for this purpose, but our hosting and security providers may process or retain IP addresses in their own logs.

Limited interaction data

• Page or section views, button clicks, form starts and submissions, demo-video plays, pauses or completions, and basic error events.
• Event timestamps, page context, referring page, and campaign parameters when present.
• A short-lived, random event identifier where needed to prevent duplicate counting. It is not intended to identify you across visits or websites.

We use this information to understand whether the website communicates the product clearly, measure waitlist interest, and identify technical or abuse issues. We do not use it to build cross-site advertising profiles or to follow you across unrelated websites.

3. Information we do not request through the waitlist

The current public website is not designed to collect:

• source code, codebases, repository URLs requiring authentication, repository credentials, API keys, passwords, or deployment secrets;
• payment-card or banking information;
• government identification documents;
• health information, biometric information, precise geolocation, or other sensitive personal information;
• personal information about children.

Please do not place confidential, regulated, or sensitive information in a free-text field or email to us.

4. How we use information

We use information for the following purposes:

• to create, maintain, verify, and manage your waitlist entry;
• to send signup confirmation, waitlist status, access invitations, and closely related launch information that you requested;
• to reply to questions, feedback, privacy requests, and security reports;
• to measure demand and understand aggregate website and demo engagement;
• to operate, troubleshoot, protect, rate-limit, and improve the website;
• to prevent spam, fraud, misuse, unauthorized access, and other harmful activity;
• to comply with law, enforce our Terms, and establish, exercise, or defend legal claims;
• to prepare for a future beta or company formation, provided that any materially new use is disclosed before it begins.

We do not sell personal information. We do not use waitlist information for third-party advertising, and we do not disclose it for cross-context behavioral advertising.

5. Legal bases for EEA, UK, and similar laws

Where a law requires a legal basis, we rely on one or more of the following:

• Your request and consent. When you deliberately join the waitlist and request the related emails described at the form. You may withdraw from the waitlist and unsubscribe at any time.
• Steps requested before a possible contract. To record your interest, evaluate potential beta participation, and provide access information if you are invited, where this basis is available.
• Legitimate interests. To operate a limited pre-launch website, understand demand, improve clarity, prevent abuse, secure our systems, communicate with people who contact us, and protect legal rights. We consider the limited nature of the data and your reasonable expectations before relying on this basis.
• Legal obligations. To comply with applicable law, lawful requests, tax or recordkeeping duties, and data-protection obligations.

Where we rely on consent, you may withdraw it without affecting processing that occurred before withdrawal.

6. Email choices

Joining the waitlist is a request to receive signup confirmation, waitlist status, potential access invitations, and closely related Platho launch updates. You can unsubscribe from non-essential messages using the link or instructions in the email, by replying to the message, or by contacting us.

We do not use email open pixels or link-click tracking in ordinary waitlist messages. Resend may still process delivery, bounce, complaint, and unsubscribe information needed to deliver email and protect its systems.

If we later want to send unrelated newsletters, broad promotions, third-party offers, or messages for a materially different purpose, we will request separate permission where required. We may retain a minimal suppression record, such as your email address and opt-out date, so we can respect an unsubscribe request.

7. Cookies, browser storage, and similar technologies

At the effective date, the public waitlist site does not intentionally use advertising cookies, cross-site tracking technologies, local storage, or session storage for analytics. Limited interaction events are sent directly to our server without creating a persistent browser profile.

Vercel and related infrastructure or security providers may use strictly necessary technologies and process technical request data to deliver, protect, and operate the site. Demo videos are intended to be served as Platho website assets rather than through a third-party embedded player.

If we add non-essential analytics, advertising pixels, third-party video players, session replay, or other optional storage or tracking, we will update this Policy and obtain consent before activation where required by applicable law.

8. Service providers and other disclosures

We disclose information only as reasonably necessary for the purposes described in this Policy.

• Vercel. Website hosting, content delivery, network operation, security, and technical logs.
• Supabase. Database hosting for waitlist records and limited interaction events.
• Resend. Delivery of confirmation, waitlist, and related emails, including delivery and suppression information.
• Professional advisers. Lawyers, accountants, security consultants, or similar advisers where reasonably necessary and subject to appropriate duties.
• Authorities or other parties. Where required by law, legal process, or a valid request, or where reasonably necessary to protect rights, safety, security, and the integrity of the service.

These providers may use subprocessors and operate under their own legal and security terms. We remain responsible for selecting and configuring our services appropriately.

9. International data transfers

Platho is intended for a worldwide audience, and our Operators and service providers may process information in the United States, Europe, or other countries. Those countries may have privacy laws that differ from the laws where you live.

Where required, we use contractual safeguards or other lawful transfer mechanisms made available by our providers, such as standard contractual clauses or an applicable data-privacy framework. You may contact us for information about safeguards relevant to your data.

10. How long we keep information

We use the following intended retention periods unless a shorter or longer period is required for security, legal compliance, dispute resolution, or an active relationship:

• Waitlist details. Until you request deletion, are moved into a separately governed product relationship, or 24 months after your last meaningful interaction with Platho. If we permanently abandon the waitlist, we intend to delete remaining waitlist records within 90 days.
• Interaction events. Up to 90 days, then deleted or aggregated so they are no longer reasonably linked to a visitor.
• Abuse-prevention records. Generally up to 90 days, unless a longer period is reasonably necessary to investigate repeated or serious misuse.
• Correspondence. As long as needed to resolve the matter and maintain appropriate records, generally no longer than 24 months after the conversation ends.
• Suppression records. A minimal record may be kept as long as needed to honor an unsubscribe or do-not-contact request.
• Provider logs. Vercel, Supabase, Resend, and their subprocessors retain technical records according to their services, settings, security needs, and legal obligations.

Backups may retain deleted information for a limited period before routine overwrite. We will not restore deleted data for ordinary business use.

11. Your privacy rights

Depending on where you live and which law applies, you may have rights to:

• request access to personal information we hold about you;
• correct inaccurate or incomplete information;
• request deletion;
• object to or restrict certain processing;
• receive certain information in a portable format;
• withdraw consent and unsubscribe from marketing;
• appeal a refusal where applicable;
• complain to a data-protection authority.

Send requests to plathoshare@gmail.com from the email address used for the waitlist when possible. We may ask for limited information to verify the request and prevent unauthorized disclosure or deletion. We will respond within the period required by applicable law, typically within one month for valid EEA or UK requests.

12. Regional disclosures

EEA, UK, and Switzerland

You may contact your local supervisory authority if you believe our handling of personal data violates applicable law. You may also contact us first so we can investigate and respond.

California and other US states

Some US state privacy laws apply only after a business reaches specific thresholds or conducts particular activities. To the extent an applicable law grants you rights, you may submit a request using the contact details below. We do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.

Even where a specific state privacy law does not apply to this early-stage project, we generally intend to honor reasonable requests to access, correct, delete, or stop non-essential email use of your information.

13. Security

We use reasonable technical and organizational measures appropriate to a small pre-launch waitlist. These measures include encrypted network connections, restricted administrative access, server-side validation, rate limiting, database access controls, secret management, and limiting the amount of information collected.

No method of transmission, hosting, or storage is completely secure. We cannot guarantee absolute security. If we become aware of a personal-data breach, we will investigate and provide notices required by applicable law.

14. Children

The website and waitlist are intended only for people who are at least 18 years old. We do not knowingly collect personal information from children or minors. If you believe a minor submitted information, contact us and we will take reasonable steps to delete it.

15. Future company formation or business transfer

If the Operators form a company to continue Platho, waitlist information and related records may be transferred to that company so it can operate the project. If this happens, we will update this Policy, identify the new controller, and provide notice where required.

Information may also be disclosed or transferred as part of a financing, reorganization, merger, acquisition, asset sale, insolvency process, or similar transaction, subject to applicable law and appropriate confidentiality protections.

16. Changes to this Policy

We may update this Policy as the website, providers, laws, or project status change. We will post the updated version and revise the effective date. If a change materially affects how we use existing waitlist information, we will provide additional notice or request consent where required.