Privacy Policy

This Privacy Policy explains how 10xForce (“10xForce”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal data when you visit our website, join our waitlist, or sign in as an existing member during our closed beta. It also describes the rights available to you and how to exercise them.

1. Who we are and how to contact us

10xForce is the controller responsible for the personal data described in this policy. For any privacy question, or to exercise your rights, contact us at privacy@10xforce.ai.

2. Scope of this policy

This policy applies to the 10xForce marketing website and waitlist, and to account sign-in for existing members admitted to the closed beta. Registration of new accounts is currently paused. Where we provide a separate notice for a specific feature, that notice applies in addition to this policy.

3. Information we collect

Information you provide to us

• Waitlist details. When you join the waitlist, we collect your email address and, if you choose to provide it, your name.
• Account information. If you are an existing member and sign in with Google, we receive your name, email address, and profile image from Google in accordance with your Google account settings.
• Communications. If you contact us, we collect the information you choose to include in your message.

Information we collect automatically

• Cookies and similar technologies. We use a small number of first-party cookies, including cookies that help us measure and improve the site and a cookie that records your cookie preferences. See our Cookie Policy for details.
• Usage and measurement data. We collect information about how visitors use our website, and we test different versions of our pages so that we can measure and improve their performance. Where you join the waitlist, limited information about your visit may be associated with your email address.
• Usage and device data. Our hosting and infrastructure providers automatically log technical information such as your IP address, browser type, device information, referring page, and the date and time of your request, for security, diagnostics, and abuse prevention.

We do not collect special categories of personal data through the website or waitlist, and we do not knowingly collect personal data from children (see Section 10).

4. How we use your information, and our legal bases

Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on the following legal bases:

• To operate the waitlist and notify you when a place becomes available. Legal basis: steps taken at your request, and our legitimate interests in managing access to the beta. We will send you a notification when a place opens. We will not use your waitlist email for unrelated marketing without your separate consent.
• To provide and secure the website and authenticate existing members. Legal basis: performance of a contract, and our legitimate interests in operating a secure service.
• To measure and improve our website. Legal basis: your consent, where required (visitors in the EEA, the United Kingdom, and Switzerland); otherwise, our legitimate interests in understanding and improving how the website performs.
• To prevent fraud and abuse, maintain security, and comply with law. Legal basis: our legitimate interests and compliance with our legal obligations.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies

We use cookies and similar technologies as described in our Cookie Policy. For visitors in the EEA, the United Kingdom, and Switzerland, we request your consent before setting non-essential cookies. Elsewhere, the analytics cookie runs by default but you can reject it at any time, and we honor Global Privacy Control signals; you may also adjust your browser settings. You can review the cookies we use and change your choice at any time on the Cookie Policy page.

6. How we share information

We do not sell your personal data. We share personal data only as set out below:

• Service providers (processors). We use trusted providers to operate the service, including Vercel, Inc. (website hosting and delivery), Supabase, Inc. (database, authentication, and storage), and Google LLC (sign-in through Google OAuth). These providers process personal data on our behalf under contractual terms that require appropriate safeguards.
• Legal and safety. We may disclose personal data where required by law, regulation, legal process, or a governmental request, or where reasonably necessary to protect the rights, property, or safety of 10xForce, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, and will remain subject to this policy.

Our website may contain links to third-party websites and services that we do not operate or control. This Privacy Policy does not apply to them, and we encourage you to review their own privacy policies before providing them with personal data.

7. International transfers

Our service providers may process personal data in the United States and other countries whose data protection laws may differ from those in your country. Where we transfer personal data out of the EEA, the United Kingdom, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and equivalent mechanisms offered by our providers. You may contact us for further information about these safeguards.

8. How long we keep information

• Waitlist data is retained until you ask us to remove it, until you are admitted to the service, or until the waitlist is no longer operated, whichever occurs first.
• Account data is retained for as long as your account is active and for a reasonable period afterwards as required for our legitimate business and legal purposes.
• Cookies are retained for the periods set out in our Cookie Policy.
• Server logs are retained for a limited period for security and diagnostic purposes.

9. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal data we hold about you, and request a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to, or request restriction of, certain processing.
• Request portability of the data you provided to us.
• Withdraw consent where we rely on it.
• Lodge a complaint with your local supervisory authority (in the EEA or the United Kingdom) or other competent regulator.

If you are a California resident, you have the right to know what personal information we collect, use, and disclose, to request its deletion or correction, and not to be discriminated against for exercising your rights. The categories of personal information we collect are identifiers (such as your name and email address) and internet or other electronic network activity information (such as usage and device data). We collect this information directly from you and automatically through your use of our website, and we use and disclose it for the business purposes described in this policy, including to our service providers. We do not sell or share your personal information as those terms are defined under California law, and we do not knowingly collect or sell the personal information of minors. Where your browser sends a Global Privacy Control or similar opt-out preference signal, we treat it as a valid request to opt out of any sale or sharing.

To remove yourself from the waitlist, use our unsubscribe page. To exercise any other right, email us at privacy@10xforce.ai. We will respond within the timeframes required by applicable law, and we may need to verify your identity before acting on your request.

10. Children

Our website and service are not directed to children, and you must be at least 18 years old to use them. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We maintain administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, and alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the website after an update takes effect constitutes acceptance of the revised policy to the extent permitted by law.

13. Contact

If you have any questions about this policy or our privacy practices, contact us at privacy@10xforce.ai.