This Privacy Policy describes how product.space collects, uses, and protects the information you provide through the waitlist page.

1. What we collect

Contact information you submit: email address or US phone number, and optionally a name.
Your consent preferences, including whether you opted in to email or SMS waitlist updates, along with the verbatim consent text and a consent version identifier.
Technical metadata needed to prevent abuse: a one-way hash of your IP address (never the raw IP), your user agent string, and the referring URL.

2. How we use it

To maintain the waitlist and prioritize cohorts for early access.
To contact you about product.space updates using only the channels you consented to.
To protect the waitlist against spam and automated abuse via rate-limiting and server-side validation.

3. Legal bases (EEA/UK)

Where applicable, we rely on your consent (marketing communications) and our legitimate interests (abuse prevention, service operations) as legal bases for processing.

4. Subprocessors

Railway — hosting provider; operates the application server and managed Postgres database where waitlist records are stored.
AWS End User Messaging SMS (or another SMS delivery provider) — used if we send SMS verification codes or waitlist updates to phone signups. Phone numbers are shared only when you have opted in.

We do not sell or rent your contact information to advertisers or third parties.

5. Retention

Waitlist records are retained until the earlier of (a) your unsubscribe / deletion request, or (b) the public launch of product.space plus 6 months, at which point they are deleted or anonymized.

6. Your rights

You can request access to, correction of, or deletion of your waitlist record at any time by emailing hi@product.space. EEA/UK residents additionally have the right to lodge a complaint with a supervisory authority.

7. Opting out

Email: click “Unsubscribe” in any email we send, or email hi@product.space.
SMS: reply STOP to any message to unsubscribe from waitlist SMS messages. You can also email hi@product.space.

8. Security

Data in transit is encrypted via TLS. Data at rest is stored in a managed Postgres database operated by our subprocessor. Access to the database is restricted to product.space operators and is audited.

9. Children

The Service is not directed at children under 16, and we do not knowingly collect information from them.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Effective” date above.

11. Contact

Data requests or questions: hi@product.space.