Privacy policy

1. Scope

This policy covers the Moosewave website at moosewave.com and the waitlist operated through it. It does not describe the Moosewave product, which is not generally available; a separate policy will apply when it is.

2. Who is responsible for your data

Horizonfold Labs LLP is the data fiduciary under India's Digital Personal Data Protection Act 2023 and the data controller under the EU General Data Protection Regulation.

3. What we collect and why

We collect the following when you join the waitlist. We do not collect anything else, and there is no account, no login, and no behavioural advertising on this site.

We use double opt-in: your address is not added to the waitlist until you click the confirmation link. If you never confirm, the unconfirmed record is deleted within 30 days.

4. Cookies and tracking

This website sets no cookies and runs no analytics, advertising, or third-party tracking scripts. We store one item in your browser's local storage — whether you dismissed the early-access notice — which never leaves your device and identifies nobody.

Fonts are served from our own domain rather than a third-party font service, so loading this site does not disclose your IP address to anyone but us and our hosting provider.

5. Where your data is stored

Waitlist data is stored on Amazon Web Services infrastructure in the eu-north-1 region, located in Stockholm, Sweden. Personal data collected through this site therefore remains within the European Union.

As an Indian entity we may access this data from India. Under the DPDP Act 2023, transfers are permitted to countries not restricted by the Central Government, and no such restriction applies here. For EU data subjects, storage within the EU means no international transfer of the stored data occurs.

6. Who else sees it

We do not sell, rent, or share your personal data for anyone else's marketing. The only third party involved is Amazon Web Services, which provides the hosting, database, and email delivery this site runs on, acting as our processor under contract.

We may disclose data where legally required to do so, and will tell you unless prohibited from doing so.

7. How long we keep it

• Unconfirmed signups: deleted within 30 days.
• Confirmed signups: retained until you unsubscribe or ask for deletion.
• Consent records: retained for the duration of the subscription and for three years afterwards, to evidence that consent existed.
• IP addresses: retained for 12 months, then deleted.

8. Your rights

Under the DPDP Act 2023, if you are a Data Principal you have the right to access a summary of your personal data and how it is processed; to correct or complete inaccurate data; to have data erased; to nominate someone to exercise your rights in the event of death or incapacity; and to grievance redressal through the officer named below.

Under the GDPR, if you are in the EU or EEA you have the right of access; rectification; erasure; restriction of processing; data portability; objection to processing based on legitimate interests; and withdrawal of consent at any time, which does not affect the lawfulness of processing before you withdrew it. You also have the right to lodge a complaint with your national supervisory authority.

To exercise any of these, email privacy@moosewave.com. We respond within 30 days. There is no charge. Every waitlist email also carries a one-click unsubscribe link, which removes you without needing to contact us at all.

10. Children

This site is not directed at children and we do not knowingly collect data from anyone under 18. The DPDP Act requires verifiable parental consent for children's data; rather than build that, we simply do not accept signups from children. If you believe a child has signed up, tell us and we will delete the record.

11. Changes

If we change this policy we will update the date at the top. If a change materially affects how we handle data you have already given us, we will email you rather than rely on you rechecking this page.