Privacy Policy
Effective date: 1 October 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) for the processing of personal data described in this Privacy Policy is the operator of the website yourpeai.com (“Peai”, “we”, “us”, “our”). Requests concerning data protection may be addressed to privacy@yourpeai.com.
2. Scope
This Privacy Policy applies to the website yourpeai.com, including all language versions, and to registration for the Peai waitlist (together, the “Website”). It does not apply to the Peai service itself, which will be subject to a separate privacy policy upon its release.
3. Provision of the Website
When you access the Website, your browser transmits technical data, in particular your IP address, the date and time of the request, the requested page, and information about your browser and operating system. This data is processed by our hosting provider solely to deliver the Website to you and to protect it against attacks. We do not maintain access logs of visits to the Website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of the Website.
4. Waitlist Registration
If you register for the waitlist, we process the following data:
- your email address;
- the country from which your request originates, as determined by our hosting provider from your IP address;
- the referring page (HTTP referrer), where transmitted by your browser;
- the date and time of your registration.
Your IP address is not stored. It is used only transiently to determine your country and for the security check described in Section 5.
We process your email address to inform you about Peai and to invite you to use the service once access becomes available to you. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. We process your country and the referring page to understand where interest in Peai originates, on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
The provision of your email address is neither a statutory nor a contractual requirement. Without it, however, registration for the waitlist is not possible.
5. Bot Protection (Cloudflare Turnstile)
To protect the waitlist against automated and abusive registrations, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). When you submit the registration form, Turnstile evaluates technical signals, including your IP address, TLS fingerprint, browser information (user agent), and the website being visited, in order to distinguish human users from automated programs. This data is not used for advertising purposes or to create user profiles.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in preventing fraudulent registrations and misuse of the Website. To the extent that Cloudflare also processes these signals to improve its bot detection, it does so as an independent controller; further information is available in the Turnstile Privacy Addendum.
6. Application Logs
When a registration is submitted, we record technical events, such as whether the registration succeeded, the country determined pursuant to Section 4, and any error codes. These logs contain neither your IP address nor your email address. They serve to detect errors and misuse and are deleted automatically after three days. The legal basis is Art. 6(1)(f) GDPR.
7. Storage on Your Device
We do not use cookies or tracking technologies. If you select a language, that preference is stored in your browser’s local storage so that the Website can be displayed in your chosen language on subsequent visits. This information remains on your device and is not transmitted to us. Such storage is strictly necessary to provide a function you have expressly requested (Art. 5(3) of Directive 2002/58/EC).
The Website does not use analytics, advertising, or social media services, and does not load content from third parties, with the exception of the bot protection described in Section 5.
8. Recipients and Processors
The Website, the waitlist database, and the application logs are hosted by Cloudflare, which acts as our processor pursuant to Art. 28 GDPR under a data processing agreement. The waitlist database is located in Western Europe. We do not sell your personal data and do not disclose it to any other third parties, unless we are legally obliged to do so.
9. Transfers to Third Countries
As Cloudflare is established in the United States, personal data may be transferred to the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework, on the basis of which the European Commission has adopted an adequacy decision (Art. 45 GDPR). In addition, Cloudflare’s data processing agreement incorporates the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).
10. Retention Period
We store your waitlist data until you withdraw your consent or request deletion, and in any event no longer than is necessary for the purposes set out in Section 4. If the waitlist is discontinued, or if the Peai service is not released, all waitlist data will be deleted. Application logs are deleted after three days (Section 6).
11. Your Rights
Subject to the statutory requirements, you have the right to:
- obtain access to your personal data (Art. 15 GDPR);
- obtain rectification of inaccurate data (Art. 16 GDPR);
- obtain erasure of your data (Art. 17 GDPR);
- obtain restriction of processing (Art. 18 GDPR);
- receive your data in a structured, commonly used, and machine-readable format (Art. 20 GDPR);
- withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR);
- lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or place of work (Art. 77 GDPR).
To exercise these rights, please contact privacy@yourpeai.com.
Right to object (Art. 21 GDPR). Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
12. Automated Decision-Making
We do not engage in automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The automated bot check described in Section 5 serves exclusively to protect the registration form.
13. Amendments
We may amend this Privacy Policy to reflect changes to the Website or to legal requirements. The version published on this page, as indicated by the effective date above, applies. We will not use your data for new purposes without your consent where such consent is required by law.