Privacy Policy (Pre-launch Waitlist)

Scope of this policy

This privacy policy applies only to the pre-launch waitlist signup form on this website (www.decision-defense.com). A separate, more comprehensive privacy policy will apply to the Decision Risk Registry application once launched.

Data controller

The data controller for waitlist data collected via this site is the operator of Decision Risk Registry. Contact: privacy@decision-defense.com.

What we collect

If you submit the waitlist form, we collect:

• Email address — to notify you when the product launches.
• Role and project count (optional fields) — to understand the audience interested in the product.

We do not collect IP addresses, browser fingerprints, names, or any other personal identifier through the form.

We use Cloudflare Web Analytics for aggregate page-view statistics. Cloudflare Web Analytics is cookieless and does not track individual users.

Legal basis (GDPR Art. 6)

Your consent (Art. 6(1)(a) GDPR), provided when you submit the form. You may withdraw consent at any time by emailing us — see "Your rights" below.

How long we keep your data

Until the earlier of: (a) 24 months from collection, or (b) the moment you ask us to delete your data, or (c) 90 days after the product launches and we have sent you the launch notification. After this period your email is permanently deleted.

Where we store your data

Waitlist data is stored in the EU. We use:

• Tally.so — form submission and storage. Tally is an EU-based provider (Ireland) compliant with GDPR.
• Cloudflare — website hosting and CDN. Cloudflare's data processing is governed by their Customer Data Processing Addendum.

Who we share data with

No one. We do not sell, share, or otherwise transfer your email or any other waitlist data to third parties for marketing, advertising, or analytics purposes. The only third parties involved are the processors listed above (Tally, Cloudflare), each acting solely on our instructions.

Your rights (GDPR)

You have the right to:

• Access the personal data we hold about you (Art. 15)
• Have inaccurate data corrected (Art. 16)
• Have your data deleted (Art. 17 — "right to be forgotten")
• Receive your data in a portable format (Art. 20)
• Object to processing (Art. 21)
• Lodge a complaint with the supervisory authority of your country

To exercise any of these rights, email privacy@decision-defense.com. We respond within 30 days.

Cookies

This website does not use cookies. We use Cloudflare Web Analytics, which is a cookieless analytics service.

Changes to this policy

If we materially change this policy we will email everyone on the waitlist before applying the change. The "Last updated" date at the top of this page reflects the most recent revision.