Privacy for the live site and waitlist.

This Privacy Policy applies to your use of chiru.nl, the Chiru waitlist, and any support or launch communications you send to or receive from us in connection with those services.

As of the effective date below, this site is a marketing website with a waitlist flow. If Chiru later launches an app, accounts, analytics, payments, or additional product features, we will update this policy or provide a separate notice before that broader processing begins.

Chiru is the controller responsible for the personal data covered by this Privacy Policy.

If you have a privacy question, want to exercise a data right, or want to request deletion, contact joy@chiru.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

We keep the data collection on this site intentionally narrow. We do not currently ask for payment information, precise location, or special-category data through the website.

• Contact information you submit, currently limited to the email address you enter when joining the waitlist.
• Communications data, such as the contents of emails or support messages you send to us and any information you choose to include in them.
• Technical and usage data that our hosting and infrastructure providers may log automatically, such as IP address, browser type, device information, referring page, request timestamps, and similar diagnostic or security information.
• Preference and suppression data, including unsubscribe requests or records needed to respect your communication choices.

• To operate, secure, and improve the website and waitlist flow.
• To add you to the Chiru waitlist and send you launch, invite, or product update emails if you ask to join.
• To respond to support requests, feedback, partnership inquiries, or other messages you send us.
• To prevent abuse, monitor reliability, debug issues, and enforce our Terms of Service.
• To comply with legal obligations and maintain records needed to honor opt-out or deletion requests.

Where the GDPR or similar laws apply, we process personal data on one or more of the following legal bases.

• Consent, when you voluntarily submit your email address to join the waitlist and receive related emails. You can withdraw that consent at any time.
• Legitimate interests, including running a secure website, preventing misuse, replying to messages, improving reliability, and maintaining basic business records.
• Legal obligation, when we need to retain, disclose, or otherwise process information to comply with applicable law, lawful requests, or regulatory requirements.

We do not sell your personal data and we do not rent it to third parties.

• Service providers that help us operate the site and communications, such as hosting, infrastructure, and email delivery providers, including Resend for waitlist contact management.
• Professional advisers or counterparties when reasonably necessary for legal, compliance, insurance, or transaction-related purposes.
• Authorities, regulators, courts, or law enforcement when we are legally required to disclose information or when disclosure is necessary to protect rights, safety, or the integrity of the service.
• A buyer, investor, or successor entity in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and legal safeguards.

Some of our service providers may process personal data outside the European Economic Area. When that happens, we rely on an appropriate transfer mechanism recognized by applicable law, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary measures where appropriate.

• Waitlist data is kept until you unsubscribe, ask us to delete it, we determine the waitlist is no longer active, or the data is no longer needed for the purpose for which it was collected.
• Support or business correspondence is kept for as long as reasonably necessary to respond, follow up, and maintain a record of the interaction.
• Technical and security logs are generally retained only for a limited period that is reasonably necessary for security, troubleshooting, and abuse prevention, though exact periods can vary by provider.
• We may retain minimal suppression information after an opt-out or deletion request so we can honor your request going forward.

As of the effective date below, Chiru does not use advertising cookies or cross-site tracking cookies on this website. Basic technical storage, caching, and security mechanisms may still be used by our hosting or infrastructure providers to deliver the site reliably and safely.

If we later add analytics, advertising technology, or other non-essential cookies that require notice or consent, we will update this Privacy Policy and, where required, ask for consent before using them.

Some browsers offer a Do Not Track setting, but there is no consistent industry standard for responding to it. We therefore do not currently respond to Do Not Track signals in a separate way.

Depending on where you live, you may have the right to request access to the personal data we hold about you, ask that it be corrected or deleted, object to or restrict certain processing, withdraw consent, or request a portable copy where applicable.

To exercise a right, email joy@chiru.nl. We may ask you for information needed to verify the request before acting on it. You can also unsubscribe from waitlist or launch emails at any time.

We do not currently use your data on this site for automated decision-making or profiling that produces legal or similarly significant effects.

Chiru is not directed to children under 16, and we do not knowingly collect personal data from them through this website or waitlist. If you believe a child has submitted personal data to us, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in the service, our data practices, or legal requirements. When we do, we will post the updated version here and revise the effective date below. Material changes will be highlighted through the website or by email when appropriate.