Your data should have a clear purpose.
This policy covers cortiloop.com and the pre-launch waitlist. The mobile app will receive a separate, launch-ready policy before public release.
Who is responsible
CortiLoop operates this website and is responsible for the personal information described here. For privacy questions or requests, email hello@cortiloop.com.
Information we collect
If you join the waitlist, we collect your email address, the page or form source, and the time you gave consent. Our infrastructure providers may process ordinary technical request information, such as IP address, browser details and security logs, to deliver and protect the site. We do not add that technical request data to your waitlist record.
Why we use it
We use your email address to send CortiLoop launch news and early-access invitations that you requested. Our basis for these emails is your consent. We use necessary technical information to operate, secure and diagnose the website based on our legitimate interest in providing a reliable service.
Service providers
Cloudflare hosts and protects the website and runs the server-side API Worker. Supabase provides the PostgreSQL database used to store waitlist records. These providers process information on our behalf under their applicable terms and safeguards. Processing location can depend on our configured region and provider infrastructure.
Retention
We keep a waitlist record while you remain subscribed and it is useful for CortiLoop’s launch. We delete it if you withdraw consent or ask us to do so. We also review inactive pre-launch records and delete them when they are no longer needed.
Sharing and sale
We do not sell your personal information. We do not use waitlist information for third-party advertising. We share it only with service providers needed to run the waitlist, when required by law, or as part of a business reorganization subject to appropriate protections.
Your choices and rights
You can unsubscribe using a link in an email or contact us. Depending on where you live, you may also have rights to access, correct, delete, restrict or receive a copy of your information, object to certain processing, withdraw consent and complain to a data-protection authority. Withdrawing consent does not affect earlier lawful processing.
Cookies and analytics
The current site does not set advertising cookies or run client-side behavioral analytics. Cloudflare may use strictly necessary security mechanisms to protect the service. If we add optional analytics later, we will update this policy and request consent where required.
Security and changes
We use access controls, encrypted transport and restricted server-side credentials. No online system is perfectly secure. We may update this policy as the product develops; material changes will be dated here and, when appropriate, communicated to waitlist members.
This pre-launch policy should be reviewed with operator identity, contact address, Supabase project region and email provider details before public deployment.