Privacy Policy
Effective Date: September 11, 2026 • Last Updated: September 11, 2026
Privacy at a Glance
- Zero tracking cookies or ad trackers
- Strictly no selling or sharing of personal data
- Encrypted storage with Supabase RLS
- Automated 1-click unsubscribe on every email
1. Overview & Entity Status
This Privacy Policy applies to the waitlist registration service, website, and communication channels operated under the project name "Athirius" ("Athirius", "we", "us", or "our"), currently in pre-incorporation development. Athirius is dedicated to protecting the privacy, confidentiality, and sovereignty of individuals who subscribe to our waitlist ("Users" or "you").
By voluntarily submitting your information to the Athirius waitlist, you acknowledge and accept the data practices described in this policy.
2. Information We Collect
We adhere strictly to the principle of data minimization. When you register for the Athirius waitlist, we collect only the following limited categories of personal information:
| Data Field | Purpose | Requirement |
|---|---|---|
| Full Name | Personalized communications & waitlist queue verification | Mandatory |
| Email Address | Product updates, perk delivery, launch invitation link | Mandatory |
| Role / Domain | Cohort segmentation & feature tailoring for content creators and online sellers | Optional |
We do not collect sensitive personal data, physical addresses, government identification numbers, or payment credentials during the waitlist stage.
3. Purpose & Legal Bases for Processing
Under the General Data Protection Regulation (GDPR) and comparable data protection frameworks, our lawful basis for collecting and processing your personal data is your explicit, affirmative consent (GDPR Art. 6(1)(a)). We use your data strictly for the following permitted purposes:
- Launch & Product Updates: Informing you about development milestones, release dates, and major platform features.
- Waitlist Perk Delivery: Delivering the promotional perks associated with your queue position (e.g., early access window, free credits, subscription discounts).
- Co-Creation & Community Feedback: Inviting you to participate in voluntary product surveys, interviews, and feature evaluation groups.
- Platform Security: Detecting, preventing, and mitigating spam, automated bot registrations, and unauthorized access.
4. Data Architecture, Storage & Security Safeguards
Your data is stored and secured using industry-grade infrastructure powered by Supabase (PostgreSQL). We implement multi-layered technical and organizational safeguards:
Database access is restricted through automated RLS policies. No public querying or unauthorized external reads are permitted.
All communications transmit over HTTPS/TLS 1.3 encryption, and data stored in database volumes is encrypted with AES-256.
Our registration endpoints additionally enforce server-side IP rate limiting, anti-bot honeypot traps, and payload sanitization to prevent credential injection or denial-of-service attempts.
5. Zero Selling, Sharing, or Behavioral Ad Tracking
We do not sell, rent, monetize, or trade your personal information to any third party, data broker, or marketing syndicate under any circumstance.
We do not employ third-party behavioral analytics scripts, cross-site tracking pixels (e.g., Meta Pixel, Google Ads), or invasive tracking cookies. For California residents under the California Consumer Privacy Act (CCPA/CPRA), this confirms that Athirius does not "sell" or "share" personal information as defined by California law.
6. Email Communications & Automated One-Click Opt-Out
We respect your inbox. In accordance with the US CAN-SPAM Act, the EU ePrivacy Directive, and global anti-spam regulations:
- Every email sent from Athirius includes a visible, functioning, automated one-click unsubscribe link in the footer.
- Clicking the unsubscribe link immediately ceases all marketing and product update communications without requiring multi-step verification.
- You may also opt out at any time by emailing contact@sofianelarbaouri.com with the subject line "Unsubscribe".
7. Global Data Subject Rights (GDPR & CCPA/CPRA)
Regardless of your geographic location, Athirius extends comprehensive data rights to all waitlist subscribers:
• Right to Access / Know: You may request a copy of all personal information we hold about you.
• Right to Rectification: You may correct or update any inaccurate or incomplete details.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your record from our database.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any moment without penalty.
• Right to Non-Discrimination: We will never discriminate against you for exercising your lawful privacy rights.
To exercise any of these rights, contact us directly at contact@sofianelarbaouri.com. We will acknowledge and process your request within 30 business days.
8. Data Retention & Erasure Process
We retain waitlist submission data only for as long as necessary to fulfill the waitlist program objectives, manage queue entitlements, and invite subscribers to our commercial launch.
Your data will be held until you explicitly request its removal. Upon receiving an erasure request at contact@sofianelarbaouri.com, we permanently purge your record from active Supabase databases and any associated communication lists within 30 days.
9. Launch Invitation & Self-Service Onboarding
Joining the Athirius waitlist does not automatically create a permanent user account or establish financial obligations.
Upon official platform launch, subscribers will receive an invitation email containing a secure, personalized link. Users must independently choose whether to proceed, complete the formal registration process, and configure their authentication credentials.
10. Strict Age Eligibility (18+ Requirement)
Due to the nature of Athirius as an operating system for content creators and online sellers with integrated contract, automation, and commercial workflows, our waitlist is strictly intended for individuals who are at least eighteen (18) years of age or the legal age of majority in their jurisdiction.
We do not knowingly collect personal data from individuals under 18. If we discover that an entry has been submitted by a minor, we will promptly purge that data from our systems.
11. Governing Law & Jurisdiction
This Privacy Policy and any disputes arising out of or related to our data practices shall be governed by and construed in accordance with the laws of the State of Delaware, United States of America, without giving effect to its conflict of law principles.
12. Contact & Data Controller Information
For legal inquiries, data protection questions, or to exercise your data subject rights, please contact our designated privacy officer:
Athirius Privacy Team
Email: contact@sofianelarbaouri.com
Response Window: Formal inquiries are acknowledged within 5 business days.