Infraware Privacy Notice
Last updated: 16 June 2025
1. Who We Are
Infraware (project team) ("Infraware", "we", "our")
Email: info@infraware.dev
2. The Data We Collect
| Category | Details | When we get it |
|---|---|---|
| Identity | Full name (first + last) | When you complete the wait-list form |
| Contact | Email address | Wait-list form, GitHub commits, Discord messages ¹ |
| Referral | Referral code (e.g. JOHKOH2CSG) | Optional field in wait-list form |
| Community Handles | GitHub username, Discord username | Your public GitHub activity; when you join our Discord |
¹ Discord voice channels may capture your voice; that data sits on Discord's servers and is processed under Discord's Privacy Policy.
We do not intentionally collect sensitive categories (race, health, biometric, precise location) or data from children under 13 (see Section 12).
3. Why We Use Your Data & Our Legal Bases
| Purpose | Lawful basis (GDPR art. 6) | What it means |
|---|---|---|
| Wait-list updates & early-access offers | Consent (art. 6-1-a) | You tick the box and we email you product news and early-access offers. |
| Transactional notices (e.g., confirm sign-up, security alerts) | Legitimate interests (art. 6-1-f) | Needed to run the service; no marketing. |
| Community management (moderate Discord/GitHub, enforce Code of Conduct) | Legitimate interests | Keep the community safe. |
| Legal compliance (tax, fraud, breach notices) | Legal obligation (art. 6-1-c) | When the law requires us. |
You can withdraw consent at any time (see Section 9). If we rely on legitimate interests, we have balanced them against your rights and freedoms.
4. How We Share Your Data
We use a small set of processors under GDPR-compliant Data-Processing Agreements (DPAs):
| Vendor | Service | Location | Safeguards |
|---|---|---|---|
| Supabase Inc. | Cloud Postgres & authentication | EU or USA (region selected) | SCC 2021 · AES-256 at rest · Row-Level Security |
| Namecheap PrivateEmail | Email service provider (sending & inbox) | USA | SCC 2021 |
| Vercel Inc. | Website hosting & CDN | USA | SCC 2021 · ISO 27001 |
| GitHub Inc. | Source-code hosting | USA | SCC 2021 |
| Discord Inc. | Community chat | USA | SCC 2021 |
We never sell or rent your personal data.
5. International Transfers
If we host your data in Supabase's EU region, it stays inside the EEA. For any processing that occurs in the United States (e.g., Namecheap PrivateEmail, Vercel, GitHub, Discord, or a US Supabase region) we rely on the EU Standard Contractual Clauses (EU 2021/914) and, where relevant, the UK International Data Transfer Agreement to protect it.
6. Security
- HTTPS with HSTS on every sub-domain
- AES-256 encryption at rest for contact data
- Multi-factor authentication (MFA) for all admin accounts
- Annual penetration test & 72-hour breach-response plan
7. Data Retention
| Data | Retention period |
|---|---|
| Wait-list records | 24 months after last email open or 30 days after you unsubscribe, whichever is sooner |
| Referral codes | Deleted when wait-list record is deleted |
| GitHub + Discord handles | As long as the repo/server exists (public data) |
| Back-ups | Encrypted, 30-day rolling purge |
8. Marketing & Unsubscribe
Every marketing email will include a one-click "Unsubscribe" link and a List-Unsubscribe header so you can opt-out instantly. You can also reply with "UNSUBSCRIBE".
9. Your Rights (GDPR, UK GDPR, CCPA/CPRA, CASL)
- Access – get a copy of your data.
- Rectification – correct inaccurate data.
- Erasure – "right to be forgotten".
- Restriction & Objection – stop certain processing.
- Portability – receive your data in CSV.
- Opt-out of marketing – anytime.
- California: right to know, delete, and opt-out of "sharing".
Send requests to info@infraware.dev. We aim to respond within 30 days.
10. Cookies
We do not use any analytics, advertising, or cross-site tracking cookies. The site sets only a handful of first-party, strictly necessary cookies:
- Vercel may drop a transient cookie for load-balancing and edge-caching so pages load quickly.
- Supabase will issue an authentication/session cookie only if you log in to a user area (not during wait-list sign-up).
These cookies do not track you across other websites, do not profile you, and are essential for security and basic site functionality.
11. Minors
Infraware is not directed at children under 13. We delete any data we learn was collected from a child under 13.
12. Changes to This Notice
We'll post any changes on this page. Check the "Last updated" date at the top.
13. Contact & Complaints
Questions or complaints? Email info@infraware.dev. EU/UK residents may also lodge a complaint with their local Data Protection Authority.
TL;DR
We collect only the name, email & optional referral code you give us, plus the public GitHub/Discord handles you already use. We send you launch updates, keep your data secure, let you opt-out anytime, and never sell your info.