LAUNCH LIST PRIVACY · 27 OCTOBER 2026

Your email.
Your choice.

This notice explains how we handle information when you visit Cleyora’s launch website or ask for launch and beta emails. Joining this list does not create an app account. Separate information will apply to any future app account, uploads or paid service.

Who looks after your information?

The controller is Mr Edward N McCulloch, operating Cleyora. You can contact Ed at ed@postpixl.com or write to APT-207, Oldfield Wharf, 4 Gaythorn Street, Salford, M5 4PP, United Kingdom.

What we collect

You provide your email address and your choice to receive Cleyora launch and beta updates. We record the permission-wording version, request and confirmation dates, confirmation-link expiry, and the status of adding your address to the email list. We store confirmation tokens as hashes in our database; the confirmation email contains the link itself.

To protect the form, we use short-lived request counters tied to an email address or a keyed, pseudonymised representation of the connection’s IP address. Our hosting and email providers also process connection, security and delivery information, such as IP addresses, request times and whether an email was delivered. If you contact us, we receive your message and contact details. Please do not include passwords or confidential client work.

How your permission works

The email-permission box starts unchecked. After you enter your address and tick it, we send a confirmation email. Opening its link displays a confirmation button; pressing that button adds you to the confirmed list. This extra step helps prevent someone else signing you up.

Joining is optional. Our basis for sending launch and beta updates is your consent. Declining or withdrawing it does not prevent you visiting the website. It is separate from any future account agreement. We do not sell or rent the list, or use it to send unrelated third-party promotions.

Other reasons we use information

We use necessary security, anti-abuse and delivery information for our legitimate interests in protecting the website and running a reliable email service. We use contact messages to respond to requests and keep necessary records. We may also retain or disclose limited information where required by law or needed to establish, exercise or defend a legal claim. We do not make automated decisions about you that have legal or similarly significant effects.

Who helps us provide the service?

We use Vercel to host the website and its server functions, Supabase for private permission records, and Resend to send confirmations, manage the confirmed list and respect unsubscribe preferences. The permission database and email sending are configured for Ireland. That does not mean every provider operation, support access or email delivery stays in Ireland.

Providers and their subprocessors may process information in other countries, including the United States. Their data-processing terms describe the relevant international-transfer safeguards, including contractual protections where applicable. You can contact Ed for information about the safeguards used for your data. See the providers’ Vercel privacy notice, Supabase privacy notice and Resend privacy policy.

We may disclose information to professional advisers or authorities where necessary for the reasons explained above. We do not make your email address or permission record public.

Leaving the list

Use the unsubscribe link in a launch or beta email, or contact ed@postpixl.com. We do not automatically re-subscribe an address that has previously unsubscribed. We keep only the information needed to record your choice and avoid sending further marketing. Withdrawing consent does not affect processing already carried out lawfully.

How long we keep it

Confirmation links expire after 24 hours. Unconfirmed records become eligible for deletion seven days after the link expires—normally about eight days after the request. Cleanup runs when the signup service next receives a request, so records can remain longer if the site is quiet. The anti-abuse counters expire after ten minutes or one hour, depending on the limit, and expired counters are removed on a later request.

We keep confirmed subscription and permission records while running this launch list, and review whether they are still needed at least yearly. If you unsubscribe, we may retain a minimal suppression record so we can respect that choice. Information needed for a legal obligation or claim may be kept for the relevant period. Service providers retain their own operational logs under their applicable terms and settings.

Your rights

Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, receive a portable copy, or object to processing based on legitimate interests. You can withdraw email consent at any time. Contact Ed using the details above; we may ask for proportionate information to verify that a request is yours.

You can also complain to the UK Information Commissioner’s Office. We would appreciate the opportunity to address a concern first, but you do not have to contact us before complaining.

Cookies, trackers and creative work

We do not add advertising trackers or analytics scripts to this launch-list implementation. Our hosting provider may process technical information to operate and protect the site. This form asks for an email address only: it does not accept creative-work uploads or send creative work to an AI service.

Changes to this notice

We will update this page if the launch-list processing changes. If we want to use your address for a materially different email purpose that requires consent, we will ask first. The date above identifies this version.