Privacy Policy
Abundera, Inc. ("Abundera", "we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, and safeguard information when you visit abundera.ai (the "Website") or interact with our services.
1. Information We Collect
Information you provide
| Data | When | Purpose |
|---|---|---|
| Email address | Waitlist signup | Product updates, beta invitations |
| Name (optional) | If provided via email | Personalized communication |
Information collected automatically
| Data | Method | Purpose |
|---|---|---|
| IP address | Server logs | Rate limiting, abuse prevention |
| Browser type, OS | HTTP headers | Website compatibility |
| Pages visited | Cloudflare analytics | Website improvement |
| Referring URL | HTTP headers | Understanding traffic sources |
We do not use cookies for tracking. Cloudflare Web Analytics is privacy-first and does not use cookies or track individual users across sites.
2. How We Use Your Information
We use your information to:
- Send you product updates and beta access invitations
- Respond to your inquiries or support requests
- Protect against abuse, fraud, and unauthorized access
- Improve the Website and plan future product features
- Comply with legal obligations
3. How We Store Your Data
Your email address is stored in Cloudflare D1, a serverless SQL database that operates on Cloudflare's global edge network. This means:
- Data is encrypted at rest and in transit (TLS 1.3)
- No centralized data lake or single point of failure
- Data is processed at the edge, close to where you are
- We do not store data in traditional cloud databases
4. Data Sharing
We do not sell, rent, or trade your personal information.
We share data only with:
| Service | Purpose | Data Shared |
|---|---|---|
| Cloudflare | Website hosting, database, analytics | Standard web request data |
| Resend | Transactional email delivery | Email address (for sending confirmations) |
We do not share your data with any advertising networks, data brokers, or marketing platforms.
5. Data Retention
We retain your email address for as long as you remain on our waitlist. You can request removal at any time by:
- Emailing [email protected] with the subject "Remove from waitlist"
- Clicking the unsubscribe link in any email we send
Upon removal, your email address is permanently deleted from our database within 30 days.
6. Your Rights
All users
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
California residents (CCPA)
Under the California Consumer Privacy Act, you have the right to:
- Know what personal information we collect and why
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell data)
- Not be discriminated against for exercising your privacy rights
EU/EEA residents (GDPR)
If you are in the European Union or European Economic Area, you have additional rights including the right to lodge a complaint with your local data protection authority. Our legal basis for processing is legitimate interest (providing the service you signed up for) and consent (your decision to join the waitlist).
7. Security
We implement appropriate technical and organizational measures to protect your personal information:
- TLS 1.3 encryption for all data in transit
- Encryption at rest for stored data
- Rate limiting on all API endpoints
- No passwords stored (future authentication will be passkey-only)
- Regular security reviews
8. Children's Privacy
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.
9. Third-Party Links
The Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
10. Future Product Data Practices
When Abundera's AI product launches, it will handle significantly more sensitive data (financial, benefits, health). At that time, this Privacy Policy will be updated comprehensively to cover:
- Financial data handling and security
- Health data protections
- AI model training practices (your data will never train models for other users)
- Progressive trust/permission model
- Data isolation guarantees
Users will be required to accept the updated policy before accessing the product.
11. Changes to This Policy
We may update this Privacy Policy as our practices evolve. Material changes will be communicated via email to waitlist members and by updating the "Last updated" date above. Continued use of the Website after changes constitutes acceptance.
12. Contact Us
For privacy-related questions, requests, or concerns:
Abundera, Inc.
Attn: Privacy
200 W Sahara Ave, Unit 3301
Las Vegas, NV 89102
[email protected]
We will respond to all privacy requests within 30 days.