Privacy Policy

1. Who is responsible for your data

FULL LEGAL NAME, an individual trading as Rechazo, MAILING ADDRESS, COUNTRY ("we", "us"), is the "controller" (the person who decides how and why your data is used) for the Site at https://rechazo.si.

Rechazo is not yet a registered company. If we form one, it will take over as controller and the promises in this policy will carry over (see section 13).

Contact for anything privacy-related: hello@rechazo.si.

This policy covers the website, the waitlist and the contact form. When the Rechazo software launches, customers will get a separate privacy notice and data-processing agreement for it (section 12 explains our approach to credentials).

2. What we collect, and why

2.1 What you give us (waitlist form)

When you join the waitlist you give us:

All fields are required to join. If you don't want to give them, don't submit the form; you can still read the whole Site.

2.2 What happens automatically

When you visit, our hosting provider and its network automatically handle technical data needed to deliver the page: your IP address, browser and device type (user-agent), pages requested, date/time, and error details. We use this only to run, secure and fix the Site (our legitimate interest in a working, safe website). We don't use it to build profiles or track you across sites. Providers keep these logs for a short period set by them.

If a signup fails for a technical reason, our server may write an error log that can include details of that attempt (for example the error message from our email service). We use these only to fix the problem.

2.3 What you send us directly (contact form and email)

If you use the contact form, we receive the topic you choose, your name, email address, company (optional) and your message. The form delivers it to our inbox as an email through our email provider; we don't add you to the waitlist or any mailing list because you contacted us.

If you email hello@rechazo.si or security@rechazo.si, we receive your email address, your name if you include it, and whatever you write.

We use these messages only to reply and handle your request (our legitimate interest in answering you, or steps you ask us to take). Please don't include secrets, passwords, API keys or sensitive personal data in messages.

2.4 What we do not collect

• No cookies and no tracking scripts. See the Cookie Policy.
• No analytics, advertising pixels, session recording or fingerprinting.
• No payment data. The Site takes no payments.
• No accounts or passwords. There is no login.
• No credentials or secrets. Our Site never asks for them.
• No data from the demos. The interactive demos run in your browser. Text you type or paste into them is not sent to us.
• No sensitive categories (health, biometrics, political views, etc.) and no data from children.

3. How we use your data

We use your data to:

1. add you to the waitlist and email you about Rechazo (launch, early access, important product or policy updates);
2. reply to you and handle requests;
3. run, secure and improve the Site and prevent abuse;
4. meet legal duties and protect our rights if there's a dispute;
5. notify you of changes to our Terms or this policy.

We do not use your data for advertising, sell it, rent it, or use it to train AI models.

We do no automated decision-making that has legal or similarly significant effects on you.

4. Who we share it with

Only with the service providers who help us run the Site, and only as needed. They process your data on our instructions. Current list (kept up to date in Subprocessors):

We may also share data:

• when the law requires (a valid legal request) or to protect rights, safety or security;
• in a business change, such as forming a company or a sale of the project, as described in section 13;
• with your permission.

We never share your data with advertisers or data brokers.

5. Where your data goes (international transfers)

Our providers may process data in the United States and other countries, which may have different privacy laws than yours. Where required, we rely on safeguards such as the EU/UK Standard Contractual Clauses, adequacy decisions, or the EU-US Data Privacy Framework, as offered by the provider. Ask us at hello@rechazo.si for details.

6. How long we keep it

Short version: as little as possible.

When we delete data from our systems, copies held in provider backups are overwritten in the provider's normal cycle.

7. Your rights

Depending on where you live (for example the EU/EEA, UK, California and other US states, Canada, Australia, Sri Lanka and elsewhere), you may have the right to:

• Access the data we hold about you and get a copy;
• Correct data that's wrong;
• Delete your data ("right to be forgotten");
• Restrict or object to certain use of your data;
• Take it with you (data portability);
• Withdraw your consent at any time, for example by unsubscribing. Withdrawing doesn't affect what we did before;
• Opt out of "sale" or "sharing" of personal data: we don't sell or share your data, so there is nothing to opt out of;
• Not be discriminated against for using your rights;
• Complain to your local data-protection authority (we'd appreciate the chance to fix it first).

How to use them: email hello@rechazo.si from the address you signed up with (so we can confirm it's you). We reply within 30 days (we may extend by up to 60 more days for complex requests, and we'll tell you if so). It's free unless a request is clearly baseless or excessive. We may ask you to confirm your identity. If you use an authorised agent, we may need proof of authority.

8. Choices

• Unsubscribe with the link in any email we send, or email us.
• Do Not Track / Global Privacy Control: we don't track you, so these signals don't change anything, but we honour them anyway.
• Not giving data: you can browse the Site without giving any data at all.

9. Security

We protect your data with measures suited to its small amount and low sensitivity, including: encrypted (HTTPS) connections; server-side validation of the signup form; keeping our service keys in protected server settings rather than in public code; limiting access to the data to the owner; and using strong passwords and two-factor authentication on our accounts where available. No system is perfectly secure, so we can't guarantee absolute security.

If a breach affects you and the law or the risk to you requires it, we will notify you and the relevant authority without undue delay. Found a security problem? See Security & Vulnerability Disclosure.

10. Children

The Site is for professionals and is not for anyone under 18. We don't knowingly collect data from children. If you think a child gave us data, email us and we'll delete it.

11. Links to other sites

The Site may link elsewhere (for example sources we cite or mailto: links). We aren't responsible for their privacy practices. Check their policies.

12. Rechazo product and credentials

Rechazo, once released, is intended to help teams keep API keys, passwords and tokens away from AI coding agents. We want to be clear about our approach: we do not want to hold your credentials, and we design to avoid doing so. Our binding commitments for the product will be set out in a customer privacy notice and data-processing agreement when it launches. Until then, this Site collects no credentials.

13. If we form a company or change owner

We may transfer the Site and your data to a company formed to run Rechazo, or in connection with a merger or sale. If we do, we will tell you beforehand where possible, the new owner will be bound by this policy (or one at least as protective), and you will be able to object or ask us to delete your data.

14. Changes to this policy

We'll update the "Last updated" date and, for significant changes, email waitlist members or show a notice on the Site before the change applies. Older versions are available on request.

15. Extra information by region

European Economic Area, United Kingdom and Switzerland.

• We process data under the legal bases in section 2 (consent; legitimate interests in running and securing the Site; legal obligation where applicable).
• Where you have given consent, you can withdraw it any time.
• You may complain to your national supervisory authority (for the UK, the ICO; for Slovenia, the Information Commissioner).

California and other US states. In the last 12 months we have collected the categories: identifiers (name, email), and professional information (job role), from you directly. We use them for the purposes in section 3. We do not sell or share personal information (as those terms are defined in the CCPA/CPRA), and we do not knowingly sell data of people under 16. We don't use or disclose sensitive personal information for purposes that would require a right to limit. You have the rights in section 7, including to know, delete, correct, and not to be discriminated against.

Other countries. If your country gives you rights beyond those listed (for example under Sri Lanka's Personal Data Protection Act, Canada's PIPEDA, or Australia's Privacy Act), email us and we'll honour them.

16. Contact

FULL LEGAL NAME, trading as Rechazo · MAILING ADDRESS · hello@rechazo.si