Current scope
The MVP does not enable analytics, tracking cookies, or form persistence by default.
The notice will be updated before collecting data through an authorized CRM.
Data and purpose
When persistent contact intake is enabled, the record is limited to name, email, optional organization, intent, message, and consent event. Choosing the editorial-updates waitlist records that specific purpose; when a reviewed sender is available, it requests one double-confirmation email. The subscription is not confirmed until the person uses the link.
Commercial qualification adds role, problem, desired outcome, and categorical authority, timing, budget-readiness, and data-readiness signals. Identity and text are encrypted; no price or proposal is generated automatically.
Sensitive data, passwords, credentials, and recovery material are not requested.
Retention and rights
The local control plane can receive encrypted access, correction, deletion, and withdrawal requests, but it remains disabled by default.
Every request starts with identity verification required. Preview produces internal counts only; disclosure, delivery, and deletion require human review, an approved retention policy, a provider, and a secure channel.