Privacy

Who is responsible

Posato runs this site and the beta behind it, from the Netherlands. Under the GDPR, Posato is the controller of everything described on this page.

What the form collects

The beta application form has two fields: the address of your current website, and your email address.

The part of your email address in front of the @ is used as a name, so your application has something to be filed under. Your website address is stored as the text of the application.

The form sends all of that to Posato's own API, which files it in the back office we read.

Why we hold it

To look at the site you sent us and write back to you about building a new one. That is the only purpose.

The legal ground is Article 6(1)(b) of the GDPR: steps taken at your own request before a contract.

Telling people from bots

The form runs a Cloudflare Turnstile check before it sends anything. Turnstile tells people from bots, and it may set a cookie of its own to do that.

Your IP address goes to that check, and it is counted against a limit on how many applications one address can send per minute. It is not stored with your application.

Two more gates run without asking you anything: a field no person can see, and a check on whether the form was filled faster than a human can type.

How it is kept safe

Everything you send travels over an encrypted connection and is stored in the EU. Access is limited to the account that answers your application.

Your data is not sold, and it is never used to train an AI model. We use AI to draft your new site from what is already public on the website address you send us. Your email address plays no part in that.

Who else touches it

Three companies, each doing one job:

• Cloudflare hosts this site, runs the API your application is sent to, and runs the bot check on the form.
• Supabase is the database the application is stored in. It runs in the EU, in Frankfurt.
• Resend sends the email we send you about your application.

Nothing is sold, and nothing is shared with anyone beyond those three. There is no advertising network on this site.

How long it is kept

For as long as your beta application or your account is active. After that it is deleted on request, or within a reasonable period of it going quiet.

What you can ask for

The GDPR gives you the right to ask us to:

• show you what we hold about you
• correct anything that is wrong
• delete it
• stop using it, if you object to a use
• hand it to you in a form you can take elsewhere

Ask us through the application form and we do it. If you are unhappy with the answer, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Cookies

This site sets no cookies of its own. The Turnstile check may set one when it runs. Our terms cover the rest of the beta.

Contact

Everything on this page goes through the application form. It is answered in person, within a week.

Posato · KvK 94479828