HESTOL Privacy Notice.

If you email us, we receive your email address and the information you include in your message. Your email service and ours also process the message and standard delivery data.

Private waitlist storage and signup processing are implemented in HESTOL-Web’s Lovable Cloud database. The early-access form submits your email address, optional first name, required email-consent choice, consent wording version, Privacy Notice version, and signup source. Only the optional attribution fields utm_source, utm_medium, utm_campaign, and utm_content are accepted; a full referring URL is not stored with the signup.

The database records signup and consent timestamps and waitlist status. Abuse controls include a hidden bot-trap field and request limits. Rate-limit records use a keyed hash of an available client IP identifier, or a shared fallback identifier, rather than storing raw IP addresses in those records. Hosting providers may separately process request data; the hosted IP-header handling, log fields, and log retention remain to be verified.

We use direct messages to respond to product, early-access, and privacy questions. When collection is enabled, signup information is used to record interest in HESTOL, record consent, manage waitlist membership, prevent duplicate entries and abuse, and support founder-controlled review, export, and removal. HESTOL-Web’s database is the authoritative waitlist record. A duplicate submission does not overwrite the original consent, attribution, timestamps, or status, and does not reactivate a removed record.

Signup acceptance is confirmed on screen only. Automated confirmation emails, product updates, and pilot-invitation emails are not enabled. Future email communications require separate approval and will be limited to the HESTOL updates and early-access opportunities requested by the visitor. HESTOL waitlist consent does not enroll anyone in unrelated Lorthen company marketing.

Lovable Cloud provides the website’s private waitlist database and server-side signup processing. Signup records are not made publicly readable. Founder administration uses protected Cloud access rather than customer-account registration on this website.

The website also relies on hosting infrastructure and loads typefaces from Google Fonts. Those providers may receive technical request information such as an IP address, browser details, requested page, and request time.

Email communications are not enabled. If email sending is approved in the future, this notice will be updated to name the email provider and describe the approved arrangements before any signup contact is transferred or emailed.

We retain Early Access waitlist information while your registration remains active. If you do not meaningfully interact with HESTOL for 24 months, we will delete or anonymize your waitlist information unless continued retention is reasonably necessary for a legitimate purpose or required by law. We may retain limited records of consent and communication preferences for up to three years after your waitlist registration ends, where necessary to document compliance with applicable requirements. Temporary exports of waitlist information are retained for no longer than 30 days under our internal data-handling policy. Security and application logs are generally retained for up to 90 days, subject to operational and legal requirements.

If you withdraw consent or request deletion, we will process your request in accordance with applicable law. Founder-controlled removal marks a signup as removed and excludes it from the prepared outreach export; the record is retained to prevent accidental reactivation. On an explicit erasure request, the stored record is deleted. We may retain limited suppression information to ensure you do not receive further unwanted communications. Historical consent records are not silently rewritten.