Signup privacy notice

Last updated: 21 October 2026

Operated by ntnd.ai.

This notice covers the ntnd.ai website and ntndOS alpha signup, which requests early access and subscribes you to ntnd product updates. The app and community services have separate privacy information.

In brief

If you request alpha access, we ask how to reach you and what you would like to try. We verify your email, and we review your request personally. Once you confirm your email, we may also send product updates; you can unsubscribe from those at any time.

We delete unverified requests after 7 days. We keep a verified alpha request for up to 18 months, or less if it is no longer needed.

Website analytics is optional. Google Analytics loads only if you accept its cookies, and rejecting them does not affect the site or your request. We do not sell your information or use your application to train AI models. The details are below.

What we collect and why

When you sign up, we collect your name, email, platform preference, main interest and a short description of what you would like to try. The form marks the details we need; without them we can't review your request.

We use those details to verify your email, review your application, organise testing groups and contact you about access. We also use your email to send ntnd product updates. We review invitations personally.

We also keep a record of your signup and confirmation, application status, email preferences and relevant correspondence. Technical records, including your IP address and email-delivery information, help us prevent abuse and resolve problems. Please do not include passwords, API keys or confidential or sensitive information in your application.

If you allow optional analytics on public website pages, Google Analytics 4 records page visits and basic interaction information so we can understand which pages are useful and improve the site. This may include the page path, approximate location inferred from your network address, browser and device information, and an analytics identifier. We do not send your alpha form answers to Analytics.

Emails and your choices

One signup requests alpha access and subscribes you to ntnd product updates, including alpha announcements, new features and releases. The form makes both purposes clear before you submit. One email confirmation confirms both; there is no separate subscription step. We do not send product updates before you confirm.

Product updates continue beyond the alpha until you unsubscribe. Every product-update email includes an unsubscribe link; you do not need to email us or sign in. We email you about your request, including verification, confirmation and any invitation. These messages do not grant access themselves.

Our legal basis

We rely on legitimate interests to manage the requested access programme, answer questions and protect the service. Those interests are organising a manageable test, communicating with applicants and preventing misuse. You can object to this processing or withdraw your request.

For product-update emails, we ask for your consent through the clearly labelled signup and email confirmation. Withdrawing consent does not affect processing that was lawful before withdrawal. Where processing is required by law, we rely on that legal obligation.

Optional website analytics also relies on your consent. Declining it does not affect access to the website or the alpha form. You can change your choice using the Cookies control in the footer of a public site page, such as the home page.

Who we share information with

Information is available to people administering the access programme and to service providers that support website/application hosting, email delivery and support correspondence. They receive the information needed for those services. We may also disclose information where legally required.

We do not sell your information, share it for other organisations' marketing or use your application to train AI models.

If you allow website analytics, Google LLC processes the analytics information for us as our analytics provider. We do not enable Google advertising signals or ad-personalisation features in the site tag.

Some companies that help us run this handle information outside the European Economic Area. Where EU law requires it, we only share information with them when the EU has approved their country's data protection, or under the EU's standard data protection contract. You can ask for a copy through the contact form under Your rights.

How long we keep it

• Unconfirmed signups: deleted after 7 days from submission.
• Alpha list: confirmed applications are kept for up to 18 months from email verification, or deleted sooner when no longer needed.
• Product-update subscriptions: your email address and subscription record are kept until you unsubscribe, or until we stop providing those updates. They are not subject to the alpha list's 18-month limit.
• Routine technical and delivery records: kept for up to 30 days, unless needed for a specific security incident or legal matter.
• Support correspondence: kept for up to 18 months after the matter is resolved.
• Optional website analytics: our site tag sets Google Analytics first-party cookies with a 90-day expiry measured from the first visit after consent; revisiting does not renew that expiry. You can withdraw consent and clear those cookies using the Cookies control on a public site page. We set Google Analytics user- and event-level data retention to 2 months, with no reset of the user-data period when someone returns. In plain terms, returning to the website does not restart the two-month retention period. Standard summary reports, such as monthly visitor totals, are not covered by that setting and may remain available longer.

Deleted information may remain in restricted backups for up to 30 days before those copies expire. Joining the alpha does not automatically extend the waiting list's retention period.

Your rights

You can ask to access, correct or delete your information, restrict its use, object to processing, or receive a portable copy where applicable. Use our contact form; we may need to verify that the request is yours. Where GDPR applies, we respond within one month and explain any permitted extension.

You can unsubscribe from product updates anytime. Unsubscribing does not itself withdraw your access request. If you ask us to delete all your signup information, we remove your application and subscription. If you unsubscribe, we keep your email address on a suppression list so we don't email you again. If you ask us to delete your data, we delete it, including from that list, and keep only a short record of your request until our service providers have deleted their copies; then we delete that record too.

You can complain to a competent data-protection authority, including the authority where you live or work in the EEA, without contacting us first.

Tracking

Google Analytics is optional and runs only after you select Accept analytics cookies on a public site page. Before consent, or on later page loads after a refusal, the Google Analytics script is not requested and it sets no analytics cookies. The choice itself is stored in your browser so we can respect it on later visits. The signup, contact, verification and legal pages do not load Google Analytics. We do not use advertising analytics or email-open and click tracking. Necessary browser preferences and security records are separate.