Privacy policy
Effective November 3, 2026
Summary
- We collect your email address only when you join the early-access list, and we use it only to email you about HyphaBase.
- We don't sell or share your personal information, and we don't use it for advertising.
- The site sets no cookies. Visitor analytics are aggregate and cookieless.
- You can unsubscribe from any email in one click, and ask us to see, correct or delete your data at any time.
Who we are
HyphaBase (“HyphaBase”, “we”, “us”) operates the website at hyphabase.com and is the controller of the personal information described here. Contact: hello@hyphabase.com, or by post at HyphaBase, 7373 E. Doubletree Ranch Road, Suite 165, Scottsdale, AZ 85258.
This policy covers the website (the landing page, the blog and the early-access list). It does not cover the HyphaBase platform itself, which will have its own terms and privacy commitments when sandbox access opens.
What we collect
When you join the early-access list
- Your email address.
- A record of your consent: the date and time you signed up and which version of the signup wording you saw.
- How you found us: campaign tags in the link you followed (such as
utm_source), the referring website, the first page you landed on, the page you signed up on and the last blog article you read before signing up.
When you email us
Your email address, your message and anything you choose to include, such as what you're building.
When you visit the site
- Aggregate analytics: page views, referring sites, approximate country, and browser and device type. These are counted without cookies or other identifiers and can't be tied to you.
- Security signals: to protect the signup form from bots and abuse, your IP address and basic browser characteristics are checked when you submit it. They are not added to the email list.
We don't collect sensitive information, and we never ask for payment details on this website.
Why we use it, and our legal basis
Under the EU and UK General Data Protection Regulation (GDPR), we need a legal basis for each use of your data:
| Purpose | Data | Legal basis |
|---|---|---|
| Sending the welcome email, early-access news, sandbox invitations and product updates | Email address | Your consent, which you can withdraw at any time |
| Keeping proof that you consented, and making sure we never email you after you unsubscribe | Consent record, email address | Legal obligation, and our legitimate interest in showing we follow the law |
| Learning which articles and posts are useful, so we write more of them | How you found us | Legitimate interest in improving our content; you can object at any time |
| Answering your emails | Your messages | Legitimate interest in responding to you, or steps you asked us to take |
| Understanding overall site traffic | Aggregate analytics | Legitimate interest in running and improving the website |
| Protecting the site and signup form from spam, bots and abuse | Security signals | Legitimate interest in keeping the service secure |
Where we rely on legitimate interests, we have weighed them against your rights and kept the data to the minimum we need. Joining the list is optional; if you don't give us an email address, the only consequence is that we can't email you.
Who we share it with
We share personal information only with service providers that process it on our behalf and under our instructions:
- Resend (United States): stores the early-access list and sends our emails.
- Cloudflare (global network): delivers the website, provides the cookieless Web Analytics and runs Turnstile, the bot check on the signup form, and routes email sent to our addresses.
- Google (Gmail): receives and stores the emails you send us and our replies.
We may also disclose information if the law requires it, to protect our rights or the safety of others, or to a successor if HyphaBase is reorganized or acquired. In that case this policy continues to apply.
We do not sell or “share” personal information, as those terms are defined in the California Consumer Privacy Act, and we don't use it for targeted advertising or profiling.
International transfers
HyphaBase and its service providers are based in, or process data in, the United States. If you are in the EU, UK or Switzerland, your information is transferred there. We rely on the safeguards our providers offer for these transfers, such as the European Commission's Standard Contractual Clauses and, where a provider participates, the EU–US Data Privacy Framework.
How long we keep it
- Email list data (your address, consent record and how you found us): until you unsubscribe or ask us to delete it.
- After you unsubscribe: we keep only your email address and the date you opted out, on a suppression list, so we never email you again. If you ask us to delete your data entirely, we'll explain that this also removes that safeguard.
- Emails you send us: as long as needed to continue the conversation, and no longer than two years after it ends.
- Aggregate analytics and security data: kept by Cloudflare under its own retention periods. It doesn't identify you.
Cookies and similar technologies
The site sets no cookies and uses no local storage. When you visit, the page saves how you found us (campaign tags, referrer, landing page and last article read) in your browser's session storage under the name hb_attribution. It is cleared when you close the tab, and it only leaves your device if you submit the signup form. Turnstile, the bot check, may store short-lived technical data needed to complete the check.
Because we don't track you across other websites, we don't change our behavior in response to Do Not Track or Global Privacy Control signals; there is no cross-site tracking or sale of data to opt out of.
Your rights
Depending on where you live, you have the right to:
- access the personal information we hold about you and get a copy;
- correct it if it's wrong;
- have it deleted;
- restrict or object to how we use it, including use based on legitimate interests;
- receive it in a portable format;
- withdraw your consent to emails at any time, without affecting earlier processing;
- not be treated differently for exercising any of these rights.
To unsubscribe, use the link at the bottom of any email. For anything else, email hello@hyphabase.com from the address you signed up with. We may ask you to confirm your identity, and we'll respond within 30 days, or sooner where local law requires. You may also use an authorized agent where your local law allows it.
If you are in the EU or UK and are unhappy with how we handled your request, you have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office). We'd appreciate the chance to fix things first.
Security
Access to the email list is limited to the people who run HyphaBase. Data travels over encrypted connections, and the signup form is protected against automated abuse. No system is perfectly secure; if a breach affecting your information occurs, we'll notify you and the authorities where the law requires.
Children
This website is for developers and businesses. It is not directed to children, and we don't knowingly collect information from anyone under 16. If you believe a child has signed up, email hello@hyphabase.com and we'll delete it.
Changes to this policy
We'll update this page when our practices change and revise the effective date above. If a change is significant, we'll also email the early-access list before it takes effect.
Contact
Questions or requests about your privacy: hello@hyphabase.com, or HyphaBase, 7373 E. Doubletree Ranch Road, Suite 165, Scottsdale, AZ 85258.