Privacy policy

When you join the waitlist:

• your email address, and whether you have confirmed it;
• your product URL, if you choose to add one;
• which form you used (for example, the one at the top of the homepage);
• the web page that sent you to us, if your browser shares it. We keep only the site and page path, never the query string;
• if you confirm by email, a scrambled (hashed) copy of the code we sent and when we sent it. The code is deleted once you use it;
• when you joined, when you confirmed your address, and when you unsubscribed, if you do.

If you join with Google: Google tells us your email address and that Google has verified it. We keep only the email address, not your name, profile picture or Google account ID.

When you send a partner enquiry: your name, work email, company, company website (if given), the kind of partnership you're interested in, and your message.

Technical data: when you submit a form, your IP address is used to limit repeated submissions and, with Cloudflare Turnstile, to check that you're a person and not a bot. We don't store your IP address with your waitlist signup or enquiry. Our hosting provider processes standard request data (such as IP address, browser type and the page requested) to deliver and protect the site.

• To send you a code that confirms your email address (not needed if you join with Google), then product updates and early-access information about Zutto. Submitting the waitlist form is how you ask for these emails. Updates go only to confirmed addresses.
• To reply to partner enquiries and discuss a possible partnership.
• To prevent spam, abuse and automated sign-ups.

We don't sell your personal information, share it for advertising, or add you to anyone else's mailing list.

We use a small number of providers to run the site. They process data only to provide their service to us.

• Cloudflare: hosting, content delivery, rate limiting, and Turnstile bot protection.
• A managed PostgreSQL database provider: stores waitlist signups and partner enquiries.
• Resend, and later Amazon Simple Email Service (SES): sends our emails.
• Google: if you choose “Continue with Google”, Google signs you in and shares your verified email address with us. Google's privacy policy covers that sign-in.
• Microsoft Clarity: records how visitors use the site, so we can fix pages and forms that don't work (see Cookies and analytics).
• Dodo Payments: once paid products open, our merchant of record. It runs checkout and handles payments, tax, invoices and refunds (see Payments).

These providers may process data in countries other than your own, including the United States. Where the law requires it, we rely on the provider's standard contractual protections for those transfers.

This site does not use advertising cookies. We use Microsoft Clarity to understand how people use the site: it records clicks, scrolling, mouse movement, the pages you view, and your device and browser type, and shows us heatmaps and replays of visits. Clarity masks what you type into forms, so we don't see your email address in it. Clarity sets cookies to recognise a returning visit, and Microsoft processes this data under the Microsoft Privacy Statement.

Cloudflare Turnstile runs a short check in your browser when you use a form, to tell people from bots. The “Continue with Google” button on the waitlist form is loaded from Google, which may use its own cookies to show it and to sign you in.

When accounts launch, signing in will use an essential cookie to keep you logged in. We'll update this policy before adding anything else.

Purchases of paid products (Spotlight, Premium Launch and, once it opens, Radar Pro) are processed by Dodo Payments, our merchant of record.

• What Dodo Payments collects: your name, email address, billing address and country, and your card or other payment details, entered directly on its checkout. It uses them to take payment, calculate tax, prevent fraud, and issue receipts and refunds, under its own privacy policy.
• What Zutto receives: your name and email address, your country, what you bought, the amount and currency, the payment or subscription status, and Dodo Payments' order and customer reference numbers. We use these to deliver what you bought, manage subscriptions, handle refunds and support requests, and keep the records the law requires.
• Zutto never sees or stores your full card number or security code.

Signing in and listing a product need extra data, such as your account details and the products you list. We'll update this policy to describe it before accounts and listings open.

• Waitlist: until you unsubscribe or ask us to delete your details. After you unsubscribe we keep your email address and the date you unsubscribed, so we don't email you again by mistake. Ask us and we'll delete it completely.
• Partner enquiries: as long as needed to respond and, if we partner, to manage the partnership.
• Purchases: order and payment records are kept for as long as tax and accounting law requires, even if you close your account or unsubscribe.

You can stop waitlist emails at any time with the unsubscribe link in every email, or through your mail app's unsubscribe button. More about unsubscribing.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how we use it. To make a request, email us at hello@zuttolaunch.com. If you're unhappy with how we've handled your data, you can also complain to your local data protection authority.

The site is served only over HTTPS. Access to waitlist and enquiry data is limited to the people who need it to run Zutto. No system is perfectly secure, but we'll tell affected people promptly if a breach puts their data at risk.

Zutto is built for founders and makers, not children. Please don't join if you're under 16.

We'll update this page when what we collect changes, and change the date at the top. If a change matters, we'll tell waitlist members by email before it takes effect.

Questions about this policy? Email us at hello@zuttolaunch.com.