Privacy Policy

We limit collection to what is needed to operate the website, protect the waitlist form, confirm your request, and send launch notifications.

Providing an email address is voluntary. Without it, we cannot add you to the waitlist or send launch notifications.

• Waitlist data: the work email address you submit.
• Consent context: your selected language, form source, submission time, confirmation status and time, and unsubscribe status.
• Security data: request metadata and Cloudflare Turnstile signals such as IP address, TLS fingerprint, user-agent header, sitekey and associated origin, used to distinguish people from bots and prevent abuse.
• Email operations data: delivery and bounce status, confirmation and unsubscribe events and, if enabled for a message, open and link-click events. We do not use this data for behavioral advertising.

The legal basis can vary by country. Where consent is required, it is requested at the waitlist form and confirmed through double opt-in.

• Consent: send the address-confirmation message and limited Tairo launch updates. You can withdraw consent at any time through an unsubscribe link or by contacting us.
• Legitimate interests or an equivalent security basis: validate form submissions, apply rate limits, prevent fraud and bots, and protect the website and email list.
• Legal obligation and legitimate interests: respond to valid requests, keep evidence of consent and unsubscribe, establish or defend legal claims, and comply with applicable law.

We do not sell personal data. We disclose only the data needed to providers that help us operate this pre-launch website and waitlist, and to authorities or professional advisers when legally required.

We require service providers acting for us to protect data and process it only for agreed purposes. Their own notices explain processing for which they are independently responsible.

• MailerLite: stores the subscriber as unconfirmed, sends the double opt-in message, records subscription status, and sends the limited launch campaign after confirmation.
• Cloudflare Turnstile: evaluates security signals to detect and block bots. Cloudflare acts as our processor for website protection and describes separate controller processing for improving Turnstile in its Addendum.
• Website hosting and infrastructure providers: serve the website, route requests, keep bounded security logs, and maintain service availability.

We and our providers may process data in the United States, the European Economic Area, and other countries where they operate. Those countries may have different privacy laws from your country.

Where required, transfers are covered by an applicable adequacy decision, certification framework, standard contractual clauses, or another legally recognized safeguard. You may contact us for information about safeguards relevant to your data.

We keep personal data only for the waitlist and launch purposes described above, then delete or anonymize it unless a limited record is needed for legal compliance or to honor an unsubscribe request.

• Unconfirmed email addresses are scheduled for deletion within 30 days after submission if the person does not complete double opt-in.
• Confirmed subscriber data is kept until consent is withdrawn and, in any event, is scheduled for deletion or anonymization within 90 days after the final launch notification.
• A minimal suppression record may be kept as long as reasonably necessary to prove consent withdrawal and prevent further messages. Security logs are retained for a limited period appropriate to incident prevention and investigation.

Depending on where you live, you may have some or all of the following rights. We will not discriminate against you for exercising an applicable privacy right.

You may unsubscribe from launch emails at any time. Withdrawing consent does not affect processing that was lawful before withdrawal.

• Ask whether we process your data and request access, a copy, correction, or portability.
• Request deletion of personal data, subject to lawful exceptions.
• Object to or request restriction of certain processing where the law provides that right.
• Withdraw consent and unsubscribe from messages at any time.
• Complain to the privacy or data-protection authority in your place of residence, work, or the alleged infringement.

The Tairo pre-launch website is intended for business users and is not directed to children under 18. We do not knowingly request data from children. If you believe a child submitted an address, contact us and we will investigate and delete it as required.

We may update this Privacy Policy when the website, waitlist, providers, or legal requirements change. We will publish the new effective date here and provide additional notice when a change materially affects confirmed subscribers.