We collect the minimum.

What we collect

When you join the waitlist, we collect your email address, the time of signup, your browser's user-agent string, and a one-way hash of your IP address (for rate-limiting and abuse prevention). We store this in our database on Cloudflare's infrastructure.

When you browse the site — and only if you consent — Google Analytics collects standard usage data. See Cookies & Analytics below.

What we don't do

• We do not train AI models on your data.
• We do not use advertising cookies or build advertising profiles of you.
• We do not sell or rent your personal information.
• We do not share your data with marketers, brokers, or unrelated third parties.

Cookies & Analytics

We use Google Analytics 4 (GA4), provided by Google (Google Ireland Limited, with processing by Google LLC), to understand how visitors use this site so we can improve it. GA4 uses cookies to collect information such as a randomly generated identifier, the pages you view, your interactions, approximate (city-level) location, and your device and browser type. GA4 does not store your IP address — it is used only momentarily to estimate general location and is then discarded.

Analytics cookies are off by default. The first time you visit, our cookie banner lets you Accept or Decline — equally and in one click. We use Google Consent Mode, so nothing is set until you accept. You can change your choice any time via Cookie settings in the footer, and if your browser sends a Global Privacy Control (GPC) signal we treat that as a decline automatically. The lawful basis for analytics is your consent, which you may withdraw at any time.

The cookies GA4 may set, only after you accept:

We do not use any advertising or remarketing cookies.

Who we share with

We use a small number of vendors to operate the site, each receiving only the data it needs:

• Cloudflare — hosting, CDN, and database (D1). Your data is stored on Cloudflare's infrastructure.
• SMTP2GO — transactional email (waitlist confirmation and updates).
• Google Analytics — website analytics, only with your consent.

International transfers

Google Analytics may transfer information to Google servers in the United States. For visitors in the EEA, UK, and Switzerland, Google relies on the EU-U.S. Data Privacy Framework (and its UK Extension and the Swiss-U.S. DPF), under which Google LLC is certified, and on the European Commission's Standard Contractual Clauses as an additional safeguard. Your data stays protected by recognized legal safeguards even when processed outside the EEA/UK.

How long we keep it

We keep waitlist data until you ask us to delete it or it is no longer needed. Google Analytics user-level data is retained for 14 months and then deleted automatically; aggregated, non-identifying reports may be kept longer.

Your rights

If you are in the EEA or UK, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict our processing of your data;
• Portability — receive your data in a portable format;
• Object to our processing;
• Not be subject to a decision based solely on automated processing;
• Withdraw consent at any time (e.g. via Cookie settings);
• Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your local data-protection authority.

To exercise any of these, email [email protected] and we'll respond within 30 days (usually much sooner).

California residents

Under the CCPA/CPRA, you have the right to know, delete, and correct the personal information we hold, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. We honor the Global Privacy Control (GPC) signal, and declining analytics in our cookie banner opts you out. To make a request, email [email protected]. We will not discriminate against you for exercising these rights.

Security

We use industry-standard safeguards to protect your data. No method of transmission or storage is perfectly secure, but if a breach affects your personal data we will notify affected users and any required authority without undue delay, and within 72 hours where legally required.

Children

Automola is for business use and is not directed at people under 16. We do not knowingly collect data from children.

Changes

We'll update this page as the product and our practices evolve, and note the date at the top. We won't make material changes without telling you.

Contact

Questions or requests: [email protected].