Privacy
Last updated 5 October 2026. In short: we collect what you type into the waitlist form, use it to email you once at launch and to plan the product, and delete it when you ask.
Who we are
surety is an independent open-source project run by Elyas Moshirpanahi, who is responsible for this data. Contact: elyas@fitinsured.fit.
What we collect
- Your email address and the time you agreed to this policy.
- Where you came from: campaign tags in the link you clicked (for example
utm_source=linkedin), the page that sent you, and a referral code if someone shared their link with you. - Optional answers from the second step: role, company, which decision model you use, monthly decision volume, a short use case, and whether you'd like to be a design partner.
- The time you signed up.
- A scrambled form of your IP address (a salted SHA-256 hash), used only to stop spam by limiting how often one network can submit. We never store the IP address itself, and these hashes are deleted after 24 hours.
No cookies, analytics or third-party trackers run on this site. Your browser remembers the campaign tags for the current tab, so they survive a visit to this page. That stays on your device unless you sign up.
Why
- To send you one email when surety launches (and, if switched on, one email to confirm your address). Basis: your consent.
- To decide what to build first and to choose design partners, using your optional answers. Basis: your consent.
- To keep the form free of spam. Basis: our legitimate interest in a working service.
Who else sees it
We don't sell or rent your data. It's stored on a server we rent from Hetzner Online GmbH. If you ask to be a design partner, we may get a short chat notification with your role and company (not your email). If confirmation emails are switched on, they go out through our email provider.
How long we keep it
Until surety launches plus 12 months, or until you ask us to delete it, whichever comes first.
Your rights, and how to delete your data
Email elyas@fitinsured.fit from the address you signed up with and say "delete". We'll remove your record within 30 days, usually much sooner, and confirm. You can also ask for a copy of your data, ask us to correct it, or withdraw consent at any time. If you're unhappy with how we handle it, you can complain to your data protection authority.
Changes
If this policy changes in a way that matters, we'll update the date above. We won't use your data for anything new without asking you first.