DEAR THEO · DEARTHEO.APP ·T

Legal

Privacy

Last updated · July 14, 2026

Dear Theo is in early access by invitation. Right now the only thing you can do here is join the waitlist, so this policy is short and specific about that. We'll update it before accounts open.

We keep what we hold to the minimum, we're plain about it, and we never sell it. Today that's a single thing: the email you use to join the waitlist.

What we collect today

When you join the waitlist, we collect:

  • Your email address — so we can tell you when access opens.
  • Where you signed up from, if that was passed along (for example, which page or campaign).
  • The language you're reading the site in — Spanish or English.
  • A timestamp for when you signed up.
  • Two technical details your browser sends automatically: the page that referred you and your browser's language preference. We use these only to understand where interest is coming from.

That's the whole list. There's no account, no profile, and no tracking of you across other sites.

Where it's stored

Waitlist entries are stored in Google Cloud Firestore, with one record per email address. We keep each entry until access opens or until you ask us to remove it.

Bot protection (Cloudflare Turnstile)

To keep automated signups out, the form is protected by Cloudflare Turnstile. To tell a person from a bot, Turnstile may process limited technical signals, including your IP address; that processing is governed by Cloudflare's own privacy terms. We apply a short-lived, per-address rate limit to the same end. We don't store your IP address.

Your confirmation email (Resend)

When you join, we send one confirmation email through Resend, our email provider, from send.deartheo.app. We don't add you to a marketing list, and we won't email you again unless you write back or until access opens.

What we don't do

  • No accounts, sign-in, or passwords yet — there's nothing to log into.
  • No payments, and nothing to buy.
  • No third-party analytics, advertising, or tracking pixels on this site.
  • We never sell or rent your email, and we don't share it except with the processors above that make the waitlist work.

Removing your data

Want off the list, or your record deleted? Email the address below and we'll remove it — no account, no forms, no delay.

When early access opens

This section previews what will change once accounts are available; none of it applies while the site is just a waitlist. We'll publish an updated policy before it takes effect.

  • Sign-in through Google (Google OAuth), which shares your name, email address, and profile image.
  • The documents, briefs, and work you create in your workspace — kept so you can come back to it.
  • Any provider API keys you choose to connect, encrypted at rest.
  • As today, we won't sell your data, and we won't use your content to train public AI models.

Contact

Questions about privacy, or a request about your data? Email the founder directly at julianurregoruiz@gmail.com.