Privacy Policy

This notice explains how we handle personal data you give us when you join the Ambiently waitlist. We try to keep this short and honest.

1. Who is responsible for your data

The data controller is Seventwo Studio, the entity operating Ambiently.

Contact for any privacy question, data request, or withdrawal of consent: privacy@ambiently.app .

TODO: Replace with your registered legal name, address, company number, and a monitored privacy inbox before going to production.

2. What we collect

• Your email address, which you submit through the form on the landing page.
• The fact that you consented, recorded as a timestamp on your row when you ticked the consent box.

We do not collect your name, IP address, location, browser fingerprint, or any analytics data on this landing page. No cookies are set.

3. Why we use it

• Launch notification. To email you once, when Ambiently is available, so you can decide whether to try it.
• Development updates (optional). If you ticked the second checkbox, to send you occasional progress updates during development.

We will not use your email for anything else, and we will not send you unrelated marketing.

4. Legal basis

We rely on your consent under Article 6(1)(a) of the EU General Data Protection Regulation (GDPR), given by ticking the required consent box on the signup form. You may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Where it lives and who we share it with

Your email is stored in our own database — a Cloudflare D1 (SQLite) instance hosted in the European Union, in the Western Europe (Cloudflare WEUR — primarily Amsterdam, Frankfurt, Paris) region. Your data does not leave the EU.

Our only sub-processor is Cloudflare, Inc., which provides the database, the Worker that runs the website, and the CDN. Cloudflare acts as our data processor under the EU Standard Contractual Clauses and is GDPR compliant. Cloudflare’s EU data residency guarantees that data created in this region stays in this region at rest.

We do not use Resend, Mailchimp, or any other third-party email or CRM service for storing your contact details. We do not sell, rent, or otherwise share your email with anyone else, and we do not use any advertising, analytics, or tracking partners.

Cloudflare’s privacy policy: cloudflare.com/privacypolicy

6. How long we keep it

We keep your email until one of the following happens:

• You unsubscribe or ask us to delete it.
• The Ambiently waitlist is closed (after which the list is deleted within 30 days).
• You have been inactive for 24 months after launch without opening any email.

7. Your rights

Under GDPR you have the right to:

• Access a copy of the data we hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Withdraw consent at any time.
• Data portability — receive your email in a machine-readable form.
• Lodge a complaint with your national data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens .

To exercise any of these rights, email privacy@ambiently.app or click the unsubscribe link in any email we send you. We will respond within 30 days.

8. Security

Your email is stored encrypted in transit (TLS 1.3 from your browser to our Worker) and at rest on Cloudflare’s EU infrastructure. We apply the principle of data minimisation: only an email address and your consent timestamp, nothing else.

9. Children

Ambiently is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a minor has signed up, contact us and we will delete the record.

10. Changes to this policy

If we change how we process your data in any material way, we will update this page and, where required, notify you by email. The date at the top of this page always reflects the most recent revision.