This policy covers the waitlist site at www.aibodes.com. It is run by Aibödes. The Aibödes app will have its own policy before it opens.
Questions or requests: aibodes@protonmail.com
What we collect, who gets it, and how long it's kept
| What | When | Who receives it | How long it's kept |
|---|---|---|---|
| Your email address | You click "Join the beta" | Mailchimp, our email service | Until you ask us to delete it, or we close the waitlist. If you don't confirm, we delete it at our first monthly clean-up after 30 days, so within about 2 months. |
| Your role (Seller, Buyer, Both or Just curious) | You pick one. It's optional. | Mailchimp | Same as your email |
A referral tag (for example, share) |
You arrived through a link ending in ?ref= |
Mailchimp, and Vercel's request logs | Same as your email (Mailchimp); see Vercel below |
| Your IP address and browser details | Every visit to our home page (the bot-check script loads from Cloudflare). The check itself runs when you click "Join the beta". | Cloudflare, which checks for bots | Set by Cloudflare's policy |
| Your IP address | You try to join, or your visit loads a fresh subscriber count | Upstash, which counts requests per IP address to limit repeated signups | The counts expire on their own, within about 2 hours for signups and about 2 minutes for the subscriber count. They are stored with the plain IP address. Upstash's own backups follow its policy. |
| Your IP address, browser type, the page address you requested, and the time | Every request to the site | Vercel, which hosts the site | One hour in our logs. Vercel may keep its own records under its privacy policy. |
| When and from where (IP address) you confirmed | You click the link in the confirmation email | Mailchimp | Same as your email |
If the same email address is entered again, the role and referral tag from the newest entry replace the old ones. A blank role or tag keeps the old one. No second confirmation email is sent.
We do not ask for your name, phone number or home address.
Our site sets no cookies and stores nothing in your browser. Cloudflare's bot check runs in a frame on Cloudflare's own domain and may store data there under Cloudflare's policy. The site has no analytics, ad pixels or session recording.
The "Copy link" and "Text" share buttons work on your device only. They don't send anything to us.
Why we use it
- Email: to send your confirmation link, your beta invite and launch news.
- Role: to know whether you're buying, selling or both, so we can choose which beta news to send you.
- Referral tag: to count how many people joined through a shared link.
- IP address and browser details: to block bots and to limit repeated signup attempts from the same IP address.
- Request logs: to fix errors and investigate attacks.
Emails you'll get
- A confirmation email from Mailchimp. Until you click its link, Mailchimp holds your address as "pending" and we send you nothing else. If you don't click it, we won't email you again.
- Your beta invite.
- Launch news.
Every email after the confirmation has an unsubscribe link. Beta invites and launch news are sent through Mailchimp.
We've turned off open and click tracking. Mailchimp still checks clicked links to prevent abuse. Mailchimp may also estimate your country from your IP address.
Who we share it with
We share it with four companies that provide services to us. Each may also use it as its own terms allow, for example to prevent abuse or fraud. Cloudflare also uses what it collects to improve its bot detection.
| Company | What it does | Its privacy policy |
|---|---|---|
| Mailchimp (Intuit) | Stores the waitlist and sends the emails | intuit.com/privacy/statement |
| Cloudflare | Bot check (Turnstile) | cloudflare.com/turnstile-privacy-policy |
| Upstash | Counts requests per IP address | upstash.com/trust/privacy.pdf |
| Vercel | Hosts the site and keeps request logs | vercel.com/legal/privacy-policy |
We don't sell your information. We don't share it for advertising, and we don't give it to anyone for their own marketing.
We would disclose it if a valid legal order requires us to. If Aibödes is merged or sold, the waitlist may go to the new owner. We'll require them to follow this policy, or we'll email you before anything changes.
Other companies collecting data on this site
Cloudflare's bot-check script loads on every visit to our home page, so Cloudflare receives your IP address and browser details each time. Per Cloudflare's Turnstile Privacy Addendum, the check collects your IP address, a fingerprint of your connection (the TLS fingerprint) and your browser's user-agent. Cloudflare uses these to block bots and to improve its bot detection.
Cloudflare may collect information about your activity on this site and on other websites that use its bot check.
No other company's scripts, pixels or trackers run on this site.
Do Not Track
We don't track you across other websites. We don't change anything when your browser sends Do Not Track or Global Privacy Control. Cloudflare's bot check runs either way.
See, change or delete your information
- Change your role: email us and we'll update it.
- Stop emails: use the unsubscribe link in any email after the confirmation. Mailchimp then keeps your address marked "unsubscribed", only as a do-not-email record, so you aren't emailed again.
- See or delete everything: email aibodes@protonmail.com, whether or not you confirmed. We'll tell you what Mailchimp holds, or delete it.
We'll confirm we got your request within 10 business days and finish within 45 days. To protect you, we only ever reply to the address on the waitlist, and we confirm a deletion with that address before we act on it.
Deletion is permanent. Afterwards you may not be able to rejoin through our form. Email us if you want back in.
We don't delete Cloudflare checks, Upstash counts or Vercel logs on request. They expire on their own, on the schedule in the table above.
We honor these requests for everyone.
Children
The waitlist is meant for adults 18 and older. If we learn that a child under 13 signed up, we'll delete the entry.
Where your data is processed
Our four providers may process your data in the United States and other countries.
Security
The site only loads over HTTPS. Our service keys are kept in our host's server settings, not in the site's code. Vercel's request logs record your IP address (see the table).
Changes to this policy
We'll change the effective date at the top of this page whenever we change it. If a change affects how we use your email, we'll email the waitlist before it takes effect.