Privacy Policy
This policy explains how we handle your data when you join the Werkaut waitlist. Werkaut is a product by Routehaus.
Who we are
The data controller is Marcin Chołaściński, a sole proprietorship registered in Poland (NIP 9721222681). You can reach us at hello@routeha.us.
What we collect
Only your email address, when you submit it to join the waitlist. No account, no tracking profile, nothing else. Giving it is voluntary, but it is needed for us to notify you.
Why we use it, and our legal basis
- Your email – to notify you when Werkaut is available (early access). Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time; withdrawing does not affect the lawfulness of processing carried out before withdrawal. We do not send marketing newsletters from this list.
- Bot protection – we run Cloudflare Turnstile on the form to keep out bots and spam. Legal basis: our legitimate interest in protecting the form (GDPR Art. 6(1)(f)).
Who processes it
- Supabase – database hosting; your email is stored in the EU (Frankfurt region).
- Cloudflare– Turnstile bot protection. Cloudflare may process technical data outside the EU (including the US); such transfers are covered by Cloudflare's data-processing terms (Standard Contractual Clauses / EU-US Data Privacy Framework). See Cloudflare's Turnstile Privacy Addendum.
These act as our processors under data-processing agreements.
Cookies
We use no analytics or tracking cookies. Cloudflare Turnstile may set a strictly-necessary cookie to tell humans from bots; that specific cookie requires no consent and is not used to track you.
How long we keep it
Until Werkaut launches and we have sent the early-access email, until you ask us to delete it, or at most 18 months from sign-up – whichever comes first. Then we delete the list.
Your rights
You can ask to access, correct, delete, restrict, or receive a portable copy of your data, and withdraw your consent. For processing based on legitimate interest (bot protection) you can also object. Email hello@routeha.us. You may also lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl).
International users
We do not sell your personal data. We share it only with the processors named above, and where we are legally required to. Your email is stored in the EU.
Changes
We may update this policy; the effective date above reflects the latest version.