CameoDB Cloud
Privacy notice
This notice explains what we store when you use the CameoDB Cloud website at cloud.cameodb.ai, in particular when you join the waitlist, why we store it, and how you can see or delete it. We keep it short because we collect little.
Who is responsible
The controller of your personal data is:
CameoDBprivacy@cameodb.ai
For anything about your data, write to privacy@cameodb.ai.
Your data is stored on servers of Hetzner Online GmbH in the EU, which processes it on our behalf under its data processing agreement, in line with the GDPR.
What we store
When you join the waitlist, we store what the form asks for and nothing else:
- your email address (required);
- your name, company, intended use, the indexes you are interested in, and whether you want an account, if you fill these in;
- feedback, if you send it after confirming;
- when you gave your consent, whether and when you confirmed your email, and the language you used;
- where you came from (a campaign tag or the referring page, shortened), if your browser sends it.
We do not store your IP address. Requests are rate-limited in memory and nothing about them is written down. The website has no analytics, no advertising, no tracking and no third-party scripts, and its fonts are served from our own server.
The waitlist form uses one strictly necessary cookie that protects it against forged submissions. It contains no personal data and expires shortly after.
Why, and on what basis
We use your details to manage your place on the waitlist, to confirm your email address, to invite you when your access is ready, and to learn which indexes and uses to prioritise. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time, with the link in every email we send or by writing to us. Withdrawing does not affect what we did before.
Who else handles it
We do not sell or share your data. Two service providers process it on our behalf, under data processing agreements:
- Hetzner Online GmbH (Germany) hosts the website, its database and its encrypted backups, in the EU;
- Resend (United States) delivers our emails, so it receives your email address and the message. Transfers outside the EU are covered by the safeguards in Resend's data processing agreement.
How long we keep it
- If you do not confirm your email address, your entry is deleted automatically after 7 days.
- A confirmed entry is kept until you remove it or the waitlist ends, whichever comes first.
- When you remove your entry, it is deleted at once. Copies in our encrypted backups disappear within 14 days, when those backups expire.
How we protect it
All traffic is encrypted (HTTPS). The database is reachable only from the server itself, backups are encrypted before they leave it, and the links in our emails are single-use tokens of which we store only a hash.
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. The quickest way to delete your entry is the removal link in any of our emails; for everything else, write to privacy@cameodb.ai. We answer within one month.
You can also complain to a data protection authority. In Croatia this is the Agencija za zaštitu osobnih podataka (AZOP).
Changes
If this notice changes, the date at the top changes with it. If a change affects how we use the data you already gave us, we will tell you by email first.