Privacy Policy

1. Scope and controller

This policy applies to the DartFlow landing page and related waitlist, TestFlight interest, and feedback forms. For privacy requests, contact hello@dartflowapp.com.

2. Data we collect

• Contact data: email address submitted in waitlist, TestFlight, and feedback forms.
• Feedback content: message body you submit in the footer feedback form.
• Security and diagnostics data: salted IP hash, country code, browser language, and user-agent.
• Anti-bot and abuse-prevention data used for rate limiting and verification checks.
• Analytics data only when analytics consent is accepted.

3. How we use data

• Deliver waitlist and TestFlight onboarding communications.
• Review and respond to product feedback.
• Protect forms and services from spam, bots, and abuse.
• Measure product interest and improve onboarding flow (consent-based analytics).
• Maintain operational logs, troubleshooting, and incident response.

4. Legal bases (where applicable)

• Consent for optional analytics and for any optional marketing messages.
• Legitimate interests for product operations, security, fraud prevention, and service quality.
• Performance of pre-contract steps when you request waitlist or beta access.
• Legal obligations when required by applicable law.

5. Cookies and tracking technologies

We use a consent state cookie (`analytics_consent`) and local storage to remember your analytics preference. Additional details are in our Cookies and Analytics Notice.

6. Service providers and data sharing

We use third-party processors to operate the landing page:

• Supabase (database and storage APIs).
• Upstash Redis (rate limiting).
• Cloudflare Turnstile (bot protection).
• Resend (feedback alert email delivery).
• PostHog (consent-based analytics).
• Vercel Analytics (traffic analytics when enabled).

We do not sell personal information. We may disclose data when legally required or to protect rights and security.

7. Retention

Landing-page form records are retained for up to 12 months, after which scheduled cleanup removes older records unless a longer period is required by law or for active disputes.

8. International transfers

Your information may be processed in countries outside your jurisdiction by our service providers. We rely on contractual and organizational safeguards appropriate to the transfer.

9. Your rights and choices

• Request access, correction, deletion, or portability where applicable.
• Object to or restrict certain processing where applicable.
• Withdraw analytics consent at any time from the cookies page.
• Opt out of marketing emails using unsubscribe instructions in each email.

Submit requests to hello@dartflowapp.com.

10. Children

This site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

11. Policy updates

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date.

Last updated: February 20, 2026