Privacy Policy

This notice explains what GreenAnalytix collects through the waitlist at greenanalytix.com (the "Site"), why, where it is stored, and what rights you have.

1. Who is responsible for your data

The data controller is GreenAnalytix (operated by its founder, Mohammed Safwan), United Arab Emirates. Contact for any privacy matter, including the rights in section 8: hello@greenanalytix.com.

2. How a signup reaches us

The waitlist form posts to a serverless endpoint on our own domain (/api/waitlist) hosted by Vercel. That endpoint validates the submission, checks it against an anti-abuse ledger, writes the entry to our Supabase Postgres database in the ap-south-1 (Mumbai, India) region, and asks Resend to send you a confirmation email. Your details are not sent to any other destination.

3. What we collect

What you submit, stored as your waitlist entry:

• your work email address;
• your country;
• your role; and
• the date and time of your submission.

Anti-abuse ledger. To rate-limit the form we record one row per submission attempt containing a salted SHA-256 hash of your IP address and a salted SHA-256 hash of the email address submitted, plus a timestamp. We do not store your raw IP address, and the hashes cannot be read back as an address. These rows are kept for a maximum of 7 days and are then purged (section 10).

Processor logs. Vercel, which serves this Site and runs the form endpoint, logs ordinary request metadata — including your IP address and browser user agent — for security and operational purposes, under its own retention periods. We do not use those logs for marketing or profiling.

Beyond the items listed above, we collect no other personal data through this Site. There is no advertising, no analytics tracking, and no third-party cookie on it.

4. Lawful basis

We process this data on the basis of your consent, given when you submit the waitlist form. You can withdraw consent at any time (section 8); withdrawal does not affect processing carried out before you withdrew.

5. Why we use it

• to send you updates about the GreenAnalytix launch;
• to invite you to early access, where relevant to your role and region; and
• to understand overall demand by role and country, in aggregate.

We do not use waitlist data for advertising, and we do not use it to train any AI model.

6. Who processes it for us

We do not sell waitlist data and we do not share it with third parties for their own purposes. It is handled on our behalf by the following categories of processor, under terms limiting them to that purpose:

• Database hosting — Supabase, in the ap-south-1 (Mumbai, India) region. Waitlist rows are stored in an access-controlled Postgres database with row-level security, encrypted in transit and at rest by the provider.
• Transactional email — Resend, used to send the confirmation email and launch updates. Resend receives your email address and the message content.
• Website hosting and edge functions — Vercel, which serves this Site and runs the /api/waitlist endpoint. Vercel logs ordinary request metadata, including your IP address and browser user agent, for security and operational purposes.

These are the only three processors involved. No advertising network, analytics provider or data broker receives anything from this Site.

7. International transfers

Waitlist data is stored in the India region (ap-south-1) and is accessed from the United Arab Emirates. If you are in the United Kingdom or the European Economic Area, your data therefore leaves that region. Those transfers are safeguarded by the data processing terms we have in place with the processors named in section 6, which include the standard contractual clauses / UK international data transfer terms those providers offer.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• rectification — have inaccurate data corrected;
• erasure — have your entry deleted;
• restriction of processing;
• object to processing;
• portability — receive your data in a machine-readable format; and
• withdraw consent at any time.

Email hello@greenanalytix.com from the address you submitted and we will action the request. Every launch email also carries an unsubscribe link.

9. Complaints

If you are in the United Kingdom and are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would ask you to raise it with us first so we can put it right.

10. Retention

• Waitlist entries — kept until our launch communications to you have ended, or until you ask us to delete your entry, whichever is sooner. Deletion requests are actioned on the live database.
• Anti-abuse ledger rows (the salted hashes described in section 3) — kept for a maximum of 7 days from the attempt, then purged.
• Vercel request logs — retained by Vercel under its own platform retention periods; we do not copy them anywhere else.

11. Changes and contact

If this notice changes, the "last updated" date above changes with it. Questions: hello@greenanalytix.com.

12. Governing law

This notice is governed by the laws of the United Arab Emirates, without prejudice to mandatory local rights you have where you live — including the UK GDPR for UK residents.