Privacy Policy

Last updated: July 2026

This is a working draft prepared ahead of launch. It has not yet been reviewed by a lawyer and should not be published as final until it has been — particularly given the cross-border, EU-facing nature of this service.

This policy explains what information AI Product Assurance collects today, while the product is in pre-launch waitlist stage, and what it will collect once the product is live.

1. Who we are

AI Product Assurance ("we," "us") operates this website and, once launched, the AI Product Assurance platform. [Insert legal entity name and registered address before publishing.]

2. What we collect right now (waitlist stage)

The email address you submit through the waitlist form.
Standard hosting/security logs generated by our hosting provider (Cloudflare), such as IP address and request metadata — not linked to your identity beyond what's needed to keep the site secure.

We do not currently use third-party analytics or advertising trackers on this site. If that changes, this policy will be updated first.

3. Why we collect it, and our legal basis

We use your email solely to notify you when AI Product Assurance launches and to share early-access details. Our legal basis is your consent, given by submitting the form (GDPR Article 6(1)(a)).

4. How long we keep it

We keep waitlist emails until launch or until you ask us to remove them, whichever comes first. You can ask to be removed at any time using the contact details in Section 9.

5. What we'll collect after launch

Once the product is available, using it will involve additional information, including:

Account details (name, email, password) for your workspace.
Content you or your team enter into your workspace — product descriptions, architecture decisions, evidence records, and similar project information.
Payment information, processed by a third-party payment provider. We do not store your card details on our own servers.

This section will be expanded into a complete policy before the product launches.

6. AI providers and international transfers

Analyzing your workspace content may involve sending it to third-party AI providers (such as Anthropic or OpenAI) for processing. Where this involves transferring data outside the country you're in — including to the United States — we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Your rights

If you're in the EU, UK, or a jurisdiction with similar protections, you have the right to access, correct, delete, or export your personal data, and to withdraw consent at any time. Contact us using the details below to exercise these rights.

8. Cookies

This site currently uses only cookies strictly necessary for it to function (if any are set by our hosting provider). We do not use marketing or tracking cookies at this time.

9. Contact

Questions about this policy or your data: granatmediar@gmail.com.

10. Changes to this policy

We'll update this page as the product develops, and note the date of the most recent change at the top.