Retenna privacy notice: early access

1. Who we are

Retenna is run by Retenna Inc., a company incorporated in Delaware, United States. In this notice, "Retenna", "we" and "us" mean that company.

This notice explains how we handle your information when you visit retenna.ai and when you join Retenna early access. It does not cover the Retenna app, which will have its own privacy notice.

We decide how your information is used. That makes us the responsible party under South Africa's Protection of Personal Information Act (POPIA), and the controller under the UK GDPR and the EU GDPR, where those laws apply.

You can contact our Information Officer about anything in this notice at privacy@retenna.ai.

2. The short version

• To join early access, you give us your email address. It is the only thing you have to give us.
• We use it to run early access, to send you early-access and Retenna product updates, and to apply founding pricing if you later open a Retenna account.
• We do not send you an email when you join.
• Your sign-up is stored with Microsoft Azure in the United States. Our website is delivered by Cloudflare.
• We do not use analytics, advertising or tracking cookies on this site.
• We do not sell your information or use it for advertising.
• You can ask us to remove you at any time.

3. What we collect when you join

If you join again with the same email address, we keep your original sign-up. We do not create a second one or change the first.

We do not ask for your name, phone number, home address, location, payment details or a password.

4. What is collected when you visit the site

• Hosting and security (Cloudflare). Like any website, retenna.ai receives your IP address and basic details about your browser and device when you visit. Cloudflare processes these to deliver the site quickly and protect it from attacks. Cloudflare may keep limited logs of these requests for security and operations.
• Stopping automated sign-ups. When you submit the form, your IP address is passed to our sign-up service so it can stop floods of automated sign-ups. The service turns your IP address into a scrambled code using a secret key and counts attempts per minute. These counts are deleted after about two days. We do not store your IP address with your sign-up.
• Bot check. Our form does not use a separate bot check or puzzle, such as a CAPTCHA. If we add one, we will update this notice first.
• Our own logs. Our sign-up code does not write your email address or IP address to its logs. When something goes wrong, it records only an error code.
• Settings on your device. The page may remember the playback speed you chose for the film in your browser's own storage. This stays on your device and is not sent to us. The page follows your device's light or dark mode and reduced-motion settings without storing them. It is designed not to keep your email address in your browser's storage, in web addresses or in logs.
• Analytics. We do not use analytics or tracking tools on this site.
• Cookies. We do not use advertising or tracking cookies. Cloudflare may use strictly necessary cookies or similar technology for security.
• Other services the page uses. None. The page does not load anything from other websites: its fonts, images, film and scripts all come from retenna.ai.

5. How we use your information, and why we are allowed to

Our legitimate interests are running a secure, fair waitlist and understanding what people want from Retenna. We only rely on them where they do not override your own rights and interests.

Do you have to give us your email? No. It is voluntary, but we cannot add you to early access without it.

Automated decisions. We do not make decisions about you by automated means that have legal or similarly significant effects. We do not build advertising profiles.

6. Emails we send

• When you join: none. We do not send a confirmation email.
• Early-access and product updates: we will send these from retenna.ai using Microsoft Azure Communication Services. Every update will include an unsubscribe link, and you can also stop them at any time by emailing privacy@retenna.ai.
• Founding-pricing code: if you later open a Retenna account and ask to claim founding pricing, we may email a six-digit code to the address you joined with, to prove it is yours. The code expires after 10 minutes. We send it using Microsoft Azure Communication Services. We keep only a scrambled version of the code, and claim attempts are normally deleted after about a day. If your Retenna account already has the same verified email address, we may link your sign-up without sending a code.

7. Who we share your information with

We use these service providers. They handle your information on our behalf and under contract, and may not use it for their own purposes.

We may also share information:

• with authorities, courts or regulators if the law requires it;
• with our professional advisers, such as lawyers and accountants, who must keep it confidential;
• with a buyer or successor if our business, or part of it, is sold or reorganised. We would tell you first.

We do not sell your information, and we do not use it for advertising.

8. Where your information is stored

Your sign-up is stored in Microsoft's Azure data centres in the United States (the East US 2 region, in Virginia). Cloudflare may process website requests in data centres around the world, usually close to you.

If you live outside the United States, your information leaves your country, for example South Africa, the UK or the EU. It stays protected by the data protection terms we have with Microsoft and Cloudflare. These include the standard contractual clauses approved by the European Commission, with the UK addendum, and both companies take part in the EU-US Data Privacy Framework and its UK extension. These terms bind them to protect your information to a standard that the law treats as adequate, including under POPIA.

9. How long we keep it

When you leave, we delete your email address, its scrambled copy, your interests, your note and any link to a Retenna account. We keep a small anonymous record: the date you joined, which form you used, the version of the wording you agreed to, and the fact that you left. This lets us count sign-ups and show that we handled your agreement properly. It does not include your email address. If your sign-up came from an earlier version of our list, we also keep a scrambled marker so that reloading that older list cannot add you back.

Removed information can remain in database backups until they expire. We do not restore it from backups except to recover from a failure, and if we ever do, we remove it again.

10. How we keep it safe

• Information travels between your browser, Cloudflare and our service over encrypted connections (HTTPS).
• Our database cannot be reached from the public internet.
• The part of our system that accepts sign-ups can only add sign-ups. It cannot read the list.

No system is completely secure. If a security incident affects your information, we will tell you and the relevant regulators as the law requires.

11. Your rights

Wherever you live, you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct it if it is wrong;
• delete it, which also removes you from early access;
• stop sending you updates, at any time (this does not affect anything we did before);
• stop using it where we rely on our legitimate interests.

In South Africa (POPIA), you also have the right to object to your information being used for direct marketing, and to complain to the Information Regulator.

In the UK and the EU, you also have the right to limit how we use your information, to receive it in a format you can take elsewhere, and to complain to your data protection regulator.

In the United States, depending on your state, you may have rights to know, correct and delete your information. We honour these requests for everyone. We do not sell your information or share it for targeted advertising, and we will not treat you differently for using your rights.

How to ask: email privacy@retenna.ai from the address you joined with. If we need to confirm it is you, we will tell you how. We will reply within one month, and we will not charge you for a normal request.

12. Leaving early access

Email privacy@retenna.ai from the address you joined with, or use the unsubscribe link in any update we send. We will remove you as described in section 9.

If you have not yet claimed founding pricing on a Retenna account, leaving early access also ends your founding-pricing eligibility. See our early-access terms for details.

13. Children

Early access is for people aged 18 or over. If you are 13 to 17, you may join only with the permission of a parent or guardian. Children under 13 may not join.

A parent or guardian can ask us at any time to remove a sign-up made by their child by emailing privacy@retenna.ai. If we learn that a child under 13 has joined, or that someone aged 13 to 17 joined without permission, we will remove their sign-up.

14. Complaints

Please contact our Information Officer first. We would like the chance to put things right. You can also complain to a regulator:

• South Africa: the Information Regulator, inforegulator.org.za
• United Kingdom: the Information Commissioner's Office, ico.org.uk
• European Union: the data protection authority in the country where you live or work, or where you think the problem happened

15. Changes to this notice

We will update this notice when our practices change and show the new date at the top. If a change matters to how we use your information, we will email people on the early-access list before it takes effect. Where the law requires it, we will ask for your agreement again.

16. Contact

Information Officer, Retenna Inc.
Email: privacy@retenna.ai

For anything else, email hello@retenna.ai.