Privacy Policy

1. Information We Collect

When you sign up for our waitlist, we collect the following information:

• Email Address: To communicate with you about your application status and product updates
• Role/Position: To understand your use case and tailor our product development
• Data Challenges: To identify common pain points and improve our solution
• Time Spent on Data Analysis: To understand the scope of your data needs
• Functional Area: To categorize your business focus and needs
• Website Analytics: Anonymous usage data to improve our website experience

2. How We Use Your Information

We use the collected information for the following purposes:

• Waitlist Management: To process your application and communicate about your status
• Product Development: To understand user needs and prioritize feature development
• Product Improvement: To identify common challenges and build solutions that address them
• Communication: To send you updates about your application status and product launches
• Analytics: To understand website usage and improve user experience

2.1. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent (Article 6(1)(a)): When you voluntarily provide your email and application information by submitting the waitlist form
• Legitimate Interest (Article 6(1)(f)): For product development and improvement based on aggregated, anonymized data to enhance our services
• Contract Performance (Article 6(1)(b)): To fulfill our obligations under the waitlist agreement and provide you with updates about your application status

You can withdraw your consent at any time by contacting us at legal@asktables.ai or using the unsubscribe link in our emails.

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our business (e.g., email services, analytics providers)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets (with notice to users)

4. Data Security

We implement appropriate security measures to protect your personal information:

• Encrypted data transmission using HTTPS
• Secure data storage with access controls
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis

4.1. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach
• Inform affected individuals without undue delay if the breach poses a high risk to their rights and freedoms
• Provide clear information about the nature and consequences of the breach
• Explain the measures taken to address the breach and prevent future occurrences
• Provide recommendations for individuals to protect themselves from potential consequences

5. Data Retention

We retain your personal information for as long as necessary to:

• Process your waitlist application
• Provide you with product updates and communications
• Comply with legal obligations
• Resolve disputes and enforce agreements

You may request deletion of your data at any time by contacting us. We will delete your data within 30 days of receiving your request, unless we have a legal obligation to retain it longer.

6. Your Rights

Under GDPR, you have the following rights regarding your personal information:

• Right of Access (Article 15): Request a copy of the personal information we hold about you
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete information
• Right to Erasure (Article 17): Request deletion of your personal information ("right to be forgotten")
• Right to Restrict Processing (Article 18): Request limitation of processing in certain circumstances
• Right to Data Portability (Article 20): Request transfer of your data to another service in a structured format
• Right to Object (Article 21): Object to processing of your data for direct marketing or legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at legal@asktables.ai. We will respond to your request within 30 days.

6.1. Right to Object

You have the right to object to processing of your personal data for direct marketing purposes. You can exercise this right by:

• Clicking the unsubscribe link in any email we send
• Contacting us directly at legal@asktables.ai
• Updating your preferences in your account settings (when available)

We will stop processing your data for marketing purposes immediately upon receiving your objection.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Improve website functionality and user experience
• Provide personalized content and recommendations

You can control cookie settings through your browser preferences. Note that disabling cookies may affect website functionality.

8. Third-Party Services

We use the following third-party services that may collect information:

• Netlify: For form processing and website hosting
• Mixpanel: For website analytics and user behavior tracking
• Email Services: For sending communications and updates

These services have their own privacy policies, which we encourage you to review. We ensure all third-party services comply with GDPR requirements.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during such transfers, including:

• Standard Contractual Clauses (SCCs) with third-party service providers
• Adequacy decisions by the European Commission where applicable
• Other appropriate safeguards as required by GDPR

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete such information immediately.

11. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. Any automated processing is limited to:

• Email delivery and management
• Website analytics and performance monitoring
• Basic form validation and processing

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Updating the "Last updated" date at the top of this policy

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

If you have any questions about this privacy policy or our data practices, please contact us:

14. Consent

By submitting your waitlist application, you consent to the collection, use, and processing of your personal information as described in this privacy policy. You can withdraw your consent at any time by contacting us.