Privacy, in plain language.

What this policy covers

This policy covers the Rill waitlist at this site: the email form, referral links, confirmation and waitlist email, and the admin view used by the people running the list. It does not cover the Rill product, which is not open yet. A separate product privacy notice will be published before early access begins.

What we collect

• Your email address. Used to hold your place and to write when your spot is ready.
• Referral information. Your own referral code, and the code of the person who referred you, if you arrived through a link.
• Campaign parameters. UTM fields in the link you arrived through, so we can tell which channels are worth the effort.
• A hashed IP address. We use a salted one-way hash for rate limiting and abuse prevention. We do not store the raw IP address in the waitlist.
• Timestamps and status. When you joined, your position, and whether you have unsubscribed.
• Local preferences. Your light or dark theme choice is stored in your browser, not on our server.

The site uses privacy-friendly, aggregate analytics from Vercel to understand page performance and signup events. It does not use advertising cookies or cross-site tracking pixels.

Why we collect it

To hold your place in line, send the confirmation and launch email you asked for, attribute referrals, keep the list free of automated abuse, and understand interest in Rill in aggregate. We do not use your email for a newsletter or a drip campaign.

Who processes it

The waitlist uses Supabase for database storage, Resend for email delivery, and Vercel for hosting and aggregate analytics. These providers process data on our instructions and under their own terms. We do not sell, rent, or trade waitlist data.

What we do not do

• We do not train shared AI models on your waitlist data.
• We do not add you to a marketing list you did not ask for.
• We do not use advertising cookies or sell audience data.
• We do not publish the list or expose email addresses on the site.

How long we keep it

We keep waitlist data while you are on the list, until you ask us to delete it, or twelve months after early access ends, whichever comes first. If you unsubscribe, we remove your campaign details, IP hash, and referral edge, retire your referral link, and keep your email only as a suppression record so you are not added again. A manual deletion request removes the record itself. Backups are rotated on a short schedule and are not used for any other purpose.

Your choices

Every waitlist email includes an unsubscribe link, and you can use the unsubscribe page at any time. You can also write to hello@rill.agent to ask for a copy of your waitlist data, a correction, or deletion. We aim to respond within 30 days. If you are in a region with additional data protection rights, say so in your message and we will honor the rights that apply.

Security

The site is served over HTTPS. Waitlist data lives in a private database with row-level security enabled and no public policies. The service key stays server-side. Admin access requires a long secret and an http-only session cookie. No system is perfectly secure, but we keep the surface small and the access narrow.

Children

The waitlist is not intended for anyone under 16. If you believe a child has joined, write to us and we will remove the record.

Changes

If this policy changes in a way that affects you, we will update the date above and, for a material change, email the waitlist before the change takes effect.

Contact

Questions, requests, or corrections: hello@rill.agent.

This page is a plain-language description of the waitlist, not a substitute for the product’s full privacy notice. Nothing here promises a level of security or compliance beyond what the site actually implements.