We've written this in plain English on purpose. No legal jargon, no hidden surprises.
The short version: you give us your email address to join our waitlist, we use it to let you know when Amla launches, and we don't do anything else with it.
1. Who we are
Amla is a search widget for websites, built by:
Data controller
Naoya Tatsuzawa (auto-entrepreneur)
SIRET: 81191559400022
Based in the EU
Email: hello@getamla.com
As the data controller, Naoya Tatsuzawa is responsible for deciding how your personal data is collected and used, and for ensuring it is handled lawfully under the GDPR.
2. What data we collect
When you join our waitlist, we collect:
Your email address
So we can notify you when Amla launches. You provide this yourself when you fill in the waitlist form.
Your IP address
Automatically recorded when you visit the site. We use this for security purposes only (for example, to detect unusual activity). We do not use it to identify or track you. It is deleted automatically within 30 days.
That's it. We don't use cookies, tracking pixels, analytics scripts, or any other data collection on this site beyond what's listed above.
3. How we use your data
Legal basis (GDPR Article 6(1)(a)): We process your email address on the basis of your consent. You give that consent when you submit your email to join the waitlist.
We use your email address for one purpose only: to send you updates about Amla and to notify you when the product is ready.
We will not use your data for marketing unrelated to Amla, profiling, or any automated decision-making. We will never sell your data.
4. Who we share your data with
We share your data only with the service providers we need to operate. We call these "subprocessors". They process your data only on our behalf and according to our instructions.
EmailOctopus
Stores your email address and sends you our updates. EmailOctopus is based in the UK and stores data on EU servers.
Cloudflare
Hosts the Amla website and provides security services (including DDoS protection). Cloudflare may briefly process your IP address as part of serving web traffic.
Railway
Hosts the Amla API (the backend that receives your waitlist signup). We use Railway's EU deployment in Amsterdam, The Netherlands, so your data stays within the EU.
We do not sell, rent, or trade your data with anyone. We do not share it with advertisers or data brokers.
5. Your rights
Under the GDPR, you have the following rights in relation to your personal data:
- Access You can ask us what data we hold about you.
- Correction You can ask us to correct inaccurate data.
- Deletion You can ask us to delete your data at any time.
- Withdrawal of consent You can unsubscribe or ask us to stop using your data at any time — via the unsubscribe link in any email we send, or by contacting us directly.
- Portability You can ask us to send you your data in a common file format (such as a CSV spreadsheet) so you can take it elsewhere.
- Complaints If you believe we have handled your data unlawfully, you have the right to complain to the relevant data protection authority in your country.
To exercise any of these rights, email us at hello@getamla.com. We try to respond quickly — the law gives us up to 30 days, but in practice you will usually hear back from us much sooner than that.
6. How long we keep your data
We keep your email address on our waitlist until you unsubscribe or ask us to delete it.
If you ask us to delete your data, we will do so promptly.
Your IP address is deleted automatically within 30 days of being recorded.
7. Changes to this policy
If we make any meaningful changes to this policy, we will email you to let you know before the changes take effect. The date at the top of this page will always reflect when it was last updated.
8. Contact us
For any questions about this policy, or to exercise your rights, please get in touch:
Naoya Tatsuzawa
Email: hello@getamla.com