Privacy Policy

1.Who we are

Lupis AI ("Lupis", "we", "us") operates lupis.ai. Lupis is not yet incorporated, so there is no registered company name or registered office to give you. We will publish both here when there are.

Contact for anything in this document, including data requests and complaints: support@lupis.ai.

This policy covers the waitlist, the confirm and unsubscribe links in our email, and the optional survey. The Lupis app is a separate product and will have its own policy.

2.What we collect

When you join the waitlist

Your email address

The only field on the record that identifies you.

Your place in line

The order you joined in, plus any places gained from referrals.

Your share code, and the one you arrived with

A short code we issue for your invite link, and the code from the "?ref=" link that brought you here, so a referral can be credited.

Whether you confirmed, and how many referrals counted

A yes/no flag, and a count.

Two random link tokens

They make your confirm and unsubscribe links work without a login. They identify the record, not you.

That is the whole record. No name, no phone number, no social profile, no payment details.

If you take the optional survey

Skipping it costs you nothing — not your place in line, not your launch offer. One response per person, and only after your email is verified. If you take it we store:

• Your Instagram handle, which you type in. We do not connect to your account, post, follow, or message you.
• Which platforms you post on, and your niche.
• How often you post, and a band for how large your following is — never an exact number.
• Which parts of creating get in your way, and whatever you write in the two free-text boxes.
• How useful you would find each feature, on a one-to-five scale.
• Your verified email address, to check eligibility, stop duplicate responses, and reach you if you win the draw.

Please keep anything sensitive, and anyone else's personal details, out of the free-text boxes.

Automatically

Your IP address, briefly

Counted against a per-IP budget so nobody can flood the waitlist. Held in memory, expires within minutes, never written to your record or any database.

Server logs

Timestamp, path, response status and connecting IP, for security and debugging. Not joined to your waitlist record.

In your browser

One localStorage entry, "lupis-waitlist-entry", so the confirmation page can recognise you instead of asking you to join again. Clearing your browser data removes it. There are no cookies on this site.

3.Why we use it, and our legal basis

Running the waitlist

Steps taken at your request before a contract (GDPR Art. 6(1)(b)), and our legitimate interest in a fair queue (Art. 6(1)(f)).

Emailing you your confirm link and your invite

Your consent, given when you entered your address (Art. 6(1)(a)). Withdraw it from the unsubscribe link in any email.

The survey answers

Your consent, given by submitting the survey (Art. 6(1)(a)).

Running the prize draw

Performance of the promotion you entered (Art. 6(1)(b)).

Rate limiting and abuse prevention

Our legitimate interest in a working service and an honest queue (Art. 6(1)(f)).

We do not advertise to you, profile you, or combine what you gave us with data bought from anyone else.

4.Who else can see it

We do not sell your data or share it for anyone else's advertising. It passes through two categories of supplier, each under a data processing agreement and none of them free to use it for their own purposes: cloud infrastructure providers, which host the site and the databases, and an email delivery provider, which delivers our messages to your inbox.

Those suppliers operate in more than one country, so your data may be processed outside the one you live in. Where that means leaving the EEA or the UK, the transfer runs on the European Commission's Standard Contractual Clauses, plus the UK Addendum where the UK GDPR applies. We have not listed the suppliers or the countries here; email support@lupis.ai and we will tell you exactly who processes what, and where.

Otherwise we disclose data only where the law requires it, or to protect our rights or someone's safety. If Lupis is ever acquired, waitlist data may transfer with the business; we would say so here first, in time for you to unsubscribe.

Draw prizes are Amazon gift cards, delivered by email. Amazon is not a sponsor of the draw.

5.How long we keep it

Your waitlist record

Until you unsubscribe, or until we close the waitlist. Unsubscribing deletes the row outright, which is why joining again starts you at the back of the queue.

Your survey response

Two years, or until you ask us to delete it. After that, only aggregate figures that cannot be traced to you.

Draw records

One year after the draw, to show it was run properly.

Rate-limit counters

Minutes. Never written to disk.

Server logs

30 days, then deleted automatically.

6.Your rights

Email support@lupis.ai to exercise any right below. We reply within 30 days, there is no charge, and asking costs you nothing else — your place in line does not move. For deletion, the unsubscribe link in any of our emails is immediate.

Your email address is the only identifier we hold, so we verify a request by replying to the address on the record.

EU and UK

Under the GDPR and UK GDPR: access, rectification, erasure, restriction, objection to processing under legitimate interests, portability, and withdrawal of consent at any time without affecting what came before. You can also complain to your national data protection authority.

India

Under the Digital Personal Data Protection Act, 2023: a summary of the data we process and who we shared it with, correction, completion, updating, erasure, withdrawal of consent, and nomination of someone to exercise these rights for you. Grievances go to support@lupis.ai, and then to the Data Protection Board of India if we do not resolve it.

California

Under the CCPA as amended by the CPRA: know, access, correct, delete. The opt-outs do not apply here, because:

• We have not sold personal information in the last 12 months.
• We have not shared it for cross-context behavioural advertising. There is no ad technology on this site to do it with.
• We do not collect sensitive personal information as the CCPA defines it.
• We honour Global Privacy Control signals, though nothing is being sold or shared for one to switch off.

The categories collected in the last 12 months are identifiers — email address, Instagram handle, IP address — and, if you took the survey, inferences about your creative work from the answers you gave. All collected directly from you, and disclosed only to the suppliers described above. We will not discriminate against you for exercising a right.

7.Cookies and tracking

There is no cookie banner because there are no cookies. This site has:

• No cookies, first-party or third-party.
• No analytics of any kind.
• No advertising pixels or conversion tracking.
• No session recording, heatmaps, or scroll tracking.
• No embedded social widgets, third-party fonts, or external scripts.

The one localStorage entry above is strictly necessary — it exists only to deliver what you asked for, which is why it needs no consent. If we add anything that is not, we will ask you first. The share buttons on the confirmation page are ordinary links: nothing loads from those sites here, but clicking one takes you to them, where their policy applies.

8.Automated decisions and AI

Nothing here makes an automated decision with a legal or similarly significant effect on you — your queue position is arithmetic you can check yourself. We do not put your answers, email address, or handle into an AI model, and we do not use them to train one.

9.Security and breaches

Your confirm and unsubscribe links carry random tokens rather than your email address, so forwarding one of our emails does not expose your address in a URL.

No system is perfectly secure. If a breach affects your data we will tell you and the relevant regulator within the deadlines the law sets — 72 hours under the GDPR.

10.Age

This site is for people aged 18 and over. We do not ask for a birth date, so we rely on you. If someone younger has joined, email support@lupis.ai and we will delete the record.

11.Changes

We update the date at the top when this changes. If a change materially affects data you have already given us, we will email everyone on the list before it takes effect, so unsubscribing first is a real option.

12.Contact

support@lupis.ai for questions, requests, or complaints. Our email to you comes from hello@lupis.ai; anything from another address claiming to be us is not.