Privacy policy

DRAFT FOR FOUNDER REVIEW — NOT FOR PUBLICATION. Prepared by an agent from the planned intake design (pre-launch-marketing-website policy delta). It is not legal advice and has not been legally reviewed. Every [[FOUNDER INPUT: …]] marker is a fact or decision only the founder can supply; nothing here may be published until the founder approves the final text (MKT.T44).

Last updated: [[FOUNDER INPUT: approval date]]

Who we are

This website, [[FOUNDER INPUT: website domain]], is operated by [[FOUNDER INPUT: legal name of the controller]], [[FOUNDER INPUT: registered address]] ("RapidAction", "we", "us"). You can contact us about this policy or your personal data at [[FOUNDER INPUT: contact email for privacy requests]].

This policy covers the public website only. It does not cover the RapidAction application, which has its own terms and policy for people who are given access.

What we collect and why

When you request early access or write to the founder

The early-access form asks for your name and work email, and optionally your organisation, your role and what you are trying to coordinate. The "Talk to the founder" form asks for your name, work email, optionally your organisation, and your message.

We use these details to review your request, to decide whether and when to offer you early access, and to reply to you. A request does not create an account and does not guarantee access.

[[FOUNDER INPUT: the lawful basis for this use (for example legitimate interests in responding to enquiries), confirmed with your legal view]]

Optional product updates

The early-access form has a separate, optional checkbox to receive occasional product updates. It is unticked by default and never required. We record your answer, the time you gave it and the version of the wording you saw. You can ask us to stop at any time by contacting us.

Protecting the forms from abuse

To limit abuse, we count form submissions per connection in short, fixed ten-minute windows. We do not store your IP address: we keep only a one-way keyed hash of it, together with a counter, and delete each window's record about an hour after the window ends.

Analytics, only with your consent

If you choose "Allow" in the cookie notice, we use PostHog to understand how the website is used (pages viewed and which buttons are clicked). We never send what you type into a form to analytics. If you choose "Decline", or make no choice, no analytics are captured.

[[FOUNDER INPUT: the analytics retention period configured in PostHog]]

Cookies and similar storage

  • consent — remembers your analytics choice (30 days).
  • PostHog cookies — set only after you choose "Allow".
  • Your light / dark display preference is stored in your browser's local storage, not sent to us.

Who processes your data for us

We use service providers to run the website and handle requests: [[FOUNDER INPUT: confirm the list and the regions — proposed: Vercel (hosting), Neon (database), Resend (the email notifying the founder that a request arrived; it contains no personal details), PostHog (analytics, only with consent)]]. We do not sell your personal data.

How long we keep it

  • Early-access requests and messages to the founder: [[FOUNDER INPUT: retention period]]. We delete them by a manual review carried out at least [[FOUNDER INPUT: review interval, e.g. weekly]], so a request is deleted within [[FOUNDER INPUT: retention period]] plus up to one review interval.
  • Abuse-protection counters: deleted about an hour after their ten-minute window ends.
  • Analytics: as stated above.
  • Server logs kept by our hosting provider contain request identifiers, not the content of your request: [[FOUNDER INPUT: hosting log retention]].

Your choices and rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, by contacting [[FOUNDER INPUT: contact email for privacy requests]]. We find requests by the email address you used and delete them on request. [[FOUNDER INPUT: any further rights statement and supervisory authority, confirmed with your legal view]]

Changes to this policy

If we change this policy, we will update the date at the top of this page.