Privacy

When you join the waitlist, we collect:

• —Your email address, so we can tell you when access opens.
• —Where you signed up from, if that was passed along (for example, which page or campaign).
• —The language you're reading the site in, Spanish or English.
• —A timestamp for when you signed up.
• —Two technical details your browser sends automatically: the page that referred you and your browser's language preference. We use these only to understand where interest is coming from.

That's everything we keep for the waitlist. No profile, and no tracking of you across other sites.

Once you're invited and sign in, we also keep:

• —Your Google sign-in (Google OAuth), which shares your name, email address, and profile image.
• —The documents, briefs, and work you create in your workspace, kept so you can come back to it.
• —Any provider API keys you choose to connect, encrypted at rest.

Waitlist entries and account data are stored in Google Cloud Firestore, and the files you upload or generate in Google Cloud Storage. A waitlist entry stays until you ask us to remove it or delete your account.

To keep automated signups out, the form is protected by Cloudflare Turnstile. To tell a person from a bot, Turnstile may process limited technical signals, including your IP address; that processing is governed by Cloudflare's own privacy terms. We apply a short-lived, per-address rate limit to the same end. We don't store your IP address.

When you join, we send one confirmation email through Resend, our email provider, from send.deartheo.app. We don't add you to a marketing list, and we won't email you again unless you write back or until access opens.

We use Vercel Web Analytics to count page visits and a few clicks, like joining the waitlist. It's cookieless and aggregate: no profiles, no cross-site tracking.

Your browser also keeps a small note of the page and link that first brought you here. It only reaches us if you join the waitlist or sign in.

Once you have an account, we keep a record of how you use Dear Theo, such as projects created, generations run and which page first brought you here. We use it only to improve the product, and it's deleted with your account.

• —No passwords. Sign-in is through Google only, so we never see or store one.
• —No payments, and nothing to buy.
• —No advertising or third-party tracking pixels. We don't sell or share usage data.
• —We never sell or rent your email or your data. We share your email only with the processors above that make the waitlist work, and we won't use your content to train public AI models.

You can delete your account yourself from Settings, under Privacy. That removes everything tied to it: your projects, the images and video you generated, your references, your saved keys, and your usage records. If you were the only member of an organization, its elements go too; in organizations you share, only your membership is removed. Deleted files can stay in our storage recovery window for up to 7 days before they are gone for good.

Only on the waitlist, or would you rather we handle it? Email the address below and we'll remove your data.