Privacy policy

Bringdown is an early-stage product that is not yet incorporated. Until a company is registered, the person responsible for the data described here is the founder operating Bringdown. When the company is formed, this page will be updated to name it.

The easiest way to reach us about anything in this policy, including a request to delete your data, is the contact form at bringdown.app/contact.

Waitlist: the email address you submit, the application URL you optionally provide, and the time of submission.

Contact form: your email address, your message, and optionally your name and a subject.

Technical data: our hosting provider records standard server logs, which may include your IP address, browser type and the pages you request.

We do not ask for, and you should not send us, sensitive personal data.

To reply to you, and to decide the order in which we onboard design partners. We rely on your consent, given when you submit a form.

To keep the site available and prevent abuse. We rely on our legitimate interest in operating a secure service.

We do not sell your data and we do not use it for advertising.

Only the service providers that run the site for us: Vercel Inc. for hosting, and Supabase Inc. for the database. Both act on our instructions.

We may disclose data if we are legally required to do so.

Our database is hosted in the United States (AWS us-east-1). If you are in the EEA or UK, your data is transferred there under appropriate safeguards, currently the European Commission's Standard Contractual Clauses.

Waitlist entries: until you ask us to delete them, or 24 months after the waitlist closes, whichever comes first.

Contact messages: 24 months from the date you send them.

Server logs: retained by our hosting provider under their own schedule, typically no more than 30 days.

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to withdraw consent at any time.

Use the contact form and we will action it. If you are in the EEA or UK you also have the right to complain to your national data protection authority.

This site sets no advertising or cross-site tracking cookies, and we run no third-party analytics.

The database that holds this data denies all access to the public API key and can only be written by our server. We take reasonable technical and organisational measures to protect what you give us, but no method of transmission or storage is completely secure.

If we change this policy we will update the date at the top of this page, and if the change is significant we will tell people on the waitlist.