Privacy Policy

Last updated: November 12, 2024

1. Introduction

Welcome to Graft ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you join our waitlist. By submitting your email address to join our waitlist, you consent to the practices described in this policy.

2. Information We Collect

2.1 Email Address

When you join our waitlist, we collect your email address. We store this information in our database to notify you about product launches, updates, and related communications.

2.2 Automatically Collected Information

When you interact with our waitlist form, we may automatically collect certain information, including:

  • IP address and browser information
  • Timestamp of your submission
  • Device and browser type
  • Technical data collected by our bot protection service (Vercel BotID) to distinguish human users from automated bots

3. How We Use Your Information

We use the information we collect to:

  • Send you notifications about product launches and availability
  • Provide updates about Graft and our services
  • Verify your email address and prevent abuse
  • Detect and prevent automated bot activities and spam
  • Improve our services and user experience
  • Comply with legal obligations

4. Third-Party Services

4.1 Vercel BotID

We use Vercel BotID, an invisible bot protection service provided by Vercel, Inc., to verify that you are a human user and to prevent spam, abuse, and automated attacks on our waitlist. BotID operates seamlessly in the background without requiring you to complete visible challenges or CAPTCHAs.

Data Collected by BotID: BotID may collect and process technical information about your device and browser, including but not limited to:

  • IP address
  • Browser type and version
  • Operating system information
  • Device characteristics
  • Browser behavior patterns and interaction signals
  • JavaScript execution data

This technical data is used solely for the purpose of distinguishing human users from automated bots and preventing fraudulent or abusive activities. BotID does not collect personally identifiable information such as your name or email address.

Data Sharing: The technical data collected by BotID is processed by Vercel, Inc. in accordance with their privacy practices. We do not have direct access to the raw technical data collected by BotID; we only receive a verification result indicating whether a request appears to be from a human or a bot. For more information about how Vercel handles data collected through BotID, please review Vercel's Privacy Policy.

4.2 Email Validation Services

We use third-party email validation services to verify email addresses and prevent the use of disposable or invalid email addresses. These services may process your email address for validation purposes only.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your email address is stored securely in our database and is only accessible to authorized personnel.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Unsubscribe

You can unsubscribe from our waitlist communications at any time by contacting us at the email address provided below or by following the unsubscribe instructions in any email we send you.

6.2 Access and Deletion

You have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to or restrict our processing of your information

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

6.3 California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell your personal information).

6.4 European Privacy Rights

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with a supervisory authority.

7. Data Retention

We will retain your email address for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. If you request deletion of your information, we will delete it within a reasonable timeframe, subject to any legal obligations we may have to retain certain information.

BotID Data Retention: The technical data collected by Vercel BotID is retained by Vercel, Inc. in accordance with their data retention policies. We do not control the retention period for data collected by BotID. For information about BotID data retention, please refer to Vercel's Privacy Policy.

8. International Data Transfers

Your information, including data collected through BotID, may be processed and stored in countries outside of your country of residence, including the United States, where data protection laws may differ from those in your jurisdiction. By using our service, you consent to the transfer of your information to these countries.

We ensure that appropriate safeguards are in place to protect your data when it is transferred internationally. When we share data with third-party service providers like Vercel, we rely on their compliance with applicable data protection laws and their privacy policies.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our records.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us:

Email: privacy@graft.so

Website: graft.so

12. Consent

By joining our waitlist, you consent to our Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, please do not submit your email address to join our waitlist.