Privacy Policy
Last updated: April 26, 2025
Summary
- We collect your name, email, company, role, and industry primarily to manage the waitlist and notify you about CxSentinel access.
- We only send marketing updates if you opt in via the form checkbox.
- We use Cloudflare Turnstile for security (anti-spam) only, not tracking.
- Your data is never sold or shared (as defined by CCPA) and only disclosed to essential service providers (Supabase, Resend, Cloudflare) to operate the waitlist.
- You have rights to access, correct, delete your data, and unsubscribe anytime.
- Contact us at
1. Introduction and Scope
This Privacy Policy ("Policy") explains how CxSentinel LLC ("CxSentinel", "we", "us", or "our") collects, uses, discloses, and protects Personal Information when you interact with our website, join our waitlist, or otherwise use our services (collectively, the "Service"). This Policy is designed to comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
2. Definitions
- Personal Information: Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
- Processing: Any operation performed on Personal Information, such as collection, use, storage, disclosure, analysis, deletion, or modification.
- Service Provider: An entity that processes Personal Information on behalf of CxSentinel for a specific business purpose pursuant to a written contract.
- Third Party: Any entity other than CxSentinel, our users, and our Service Providers.
3. Information We Collect and Sources
We collect Personal Information directly from you when you join our waitlist or interact with our Service. The categories of Personal Information we collect include:
- Identifiers: Name, email address.
- Professional or Employment-Related Information: Company name, job title, industry.
- Commercial Information: Your explicit opt-in status for marketing communications.
- Internet or Other Electronic Network Activity Information: Cloudflare Turnstile token (collected automatically via the form for security purposes, which may involve IP address processing by Cloudflare).
The source of this information is directly from you via the waitlist form.
4. Purposes for Collecting and Using Information
We collect and use your Personal Information for the following business purposes:
- To manage and operate the CxSentinel waitlist and provide you with access to the Service when available.
- To communicate with you, including sending transactional emails (e.g., confirmation emails) and responding to inquiries.
- To send informational or marketing communications about product updates, industry news, or offers, but only if you have explicitly consented (opted-in).
- To protect the security and integrity of our Service, prevent spam and abuse (using Cloudflare Turnstile).
- To comply with legal obligations, enforce our terms, and protect our rights.
5. Legal Basis for Processing (GDPR)
Our legal bases for processing Personal Information under GDPR include:
- Consent: Where you have provided explicit consent, such as for joining the waitlist and opting into marketing emails.
- Legitimate Interests: Where processing is necessary for our legitimate interests, such as operating the Service, ensuring security, and communicating with users, provided these interests are not overridden by your data protection rights.
- Legal Obligation: Where processing is necessary to comply with a legal requirement.
6. Data Sharing and Disclosure
CxSentinel does not "sell" your Personal Information or "share" it with Third Parties for cross-context behavioral advertising, as those terms are defined under the CCPA.
We may disclose your Personal Information to the following categories of Service Providers for the business purposes described above:
- Cloud Infrastructure Providers: Such as Supabase, for database hosting and backend operations.
- Email Service Providers: Such as Resend, for managing email delivery and communications.
- Security Service Providers: Such as Cloudflare, for providing anti-spam (Turnstile) services.
These Service Providers are contractually obligated to keep your Personal Information confidential and secure, and to use it only for the specific business purposes we instruct.
We may also disclose Personal Information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of CxSentinel, our users, or others.
7. International Data Transfers
Your Personal Information may be transferred to, stored, and processed in the United States or other countries outside your jurisdiction where our Service Providers operate. We ensure that appropriate safeguards (such as Standard Contractual Clauses where applicable) are in place for such transfers in accordance with applicable data protection laws.
8. Data Retention
We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including managing the waitlist, providing the Service, complying with legal obligations, or resolving disputes. Typically, waitlist data is retained until the Service launch or until you unsubscribe or request deletion. You can request deletion of your data at any time, subject to legal and contractual restrictions.
9. Data Security
We implement and maintain reasonable administrative, technical, and physical security measures designed to protect the Personal Information we process against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include measures like encryption, access controls, secure development practices, and regular security assessments. However, no method of transmission or storage is 100% secure.
10. Your Privacy Rights
Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the following rights regarding your Personal Information:
- Right to Know/Access: Request access to the specific pieces and categories of Personal Information we hold about you, including the sources, purposes, and categories of third parties shared with.
- Right to Correct/Rectify: Request correction of inaccurate Personal Information.
- Right to Delete/Erasure: Request deletion of your Personal Information, subject to certain exceptions (e.g., legal compliance, security).
- Right to Withdraw Consent: Withdraw consent for processing based on consent (like marketing emails) at any time without affecting the lawfulness of processing before withdrawal.
- Right to Object/Restrict Processing: Object to or request restriction of certain processing activities based on legitimate interests, where applicable.
- Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format, where applicable.
- Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the "sale" or "sharing" of your Personal Information, as defined by CCPA. As stated, we do not engage in these activities.
- Right to Limit Use of Sensitive Personal Information (CCPA): We do not collect sensitive personal information as defined by CCPA.
- Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a relevant supervisory authority if you believe our processing infringes applicable data protection laws.
To exercise these rights, please contact us at
11. Do Not Track Signals
Some web browsers incorporate a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. As there is no universally accepted standard for how to respond to DNT signals, our Service does not currently respond to DNT signals.
12. Data Breach Notification
In the event of a data breach involving your Personal Information that poses a risk to your rights and freedoms and requires notification under applicable law, we will notify the relevant supervisory authority and/or affected individuals as required by law.
13. Children's Privacy
The Service is not directed to children under the age of 16. We do not knowingly collect Personal Information from children under 16. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us.
14. Changes to This Policy
We reserve the right to amend this Policy at our discretion and at any time. When we make changes to this Policy, we will post the updated notice on the Website and update the notice's effective date. For material changes, we may provide more prominent notice (e.g., via email to registered users). Your continued use of our Service following the posting of changes constitutes your acceptance of such changes.
15. Governing Law
This Policy shall be governed by and construed in accordance with the laws of the State of Alaska, United States, without regard to its conflict of laws principles.
16. Contact Information
If you have any questions or comments about this Policy, the ways in which CxSentinel collects and uses your information described herein, your choices and rights regarding such use, or wish to exercise your rights under applicable law, please do not hesitate to contact us at:
Email: