Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data under the European Union General Data Protection Regulation (EU GDPR 2016/679) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018) is:

2. Personal Data Collected During Pre-Launch

During our pre-launch phase, we prioritize data minimization. We only collect the information necessary to facilitate early access invitations and forecast platform capacity:

• Contact Information: Your email address submitted to request early access, reserve database capacity, or receive launch communications.
• Reservation Preferences & Inquiries (Optional): Selected plan tiers, capacity configurations (such as storage or query concurrency allocations), and any intended use cases or technical interests you voluntarily choose to share.
• Technical & Operational Data: Standard connection and network data (such as IP address, user agent, requested URI, and response status) and functional browser storage keys (localStorage) utilized for service security, rate-limiting, and managing your reservation state.

3. Purpose and Legal Basis for Processing

We process your personal data strictly under the following lawful bases set forth in Article 6 of the GDPR:

• Consent (GDPR Art. 6(1)(a)): When you voluntarily submit your email to join the early access waitlist or pre-reserve plan capacity, you provide consent for us to send you early access invitations, sandbox API credentials, and product updates tailored to your stated interests.
• Legitimate Interests (GDPR Art. 6(1)(f)): To protect our service from abuse, understand developer feature demand across different telemetry architectures, and forecast regional node capacity based on aggregated plan reservation inquiries.

4. Zero Third-Party Advertising Trackers

TimesinkDB does not utilize third-party cross-site tracking pixels, retargeting cookies, or intrusive behavioral ad networks. We believe developer tools should respect engineering privacy. Standard HTTP cookies or local storage keys (`localStorage`) are utilized solely for essential functional operations, such as preserving your waitlist reservation state and playground code snippets.

5. Commercial Billing & Merchant of Record (Paddle)

Commercial subscription payments and VAT/sales tax invoicing are handled by our designated Merchant of Record (MoR), Paddle Payments Limited (Ireland). During the pre-launch phase, zero payment methods or credit cards are collected. When commercial checkout goes live in October 2026, billing credentials will be collected and processed directly by Paddle under their PCI-DSS Level 1 certified environment.

6. Regional Data Residency & Sovereign Hosting

TimesinkDB's central control plane and all customer account records are hosted sovereignly within the European Union (Frankfurt, Germany), guaranteeing complete data protection under European regulations. Customer database storage volumes and telemetry ingestion pipelines operate on an isolated regional topology, deployed directly in the cloud service region of the customer's choice (e.g. Frankfurt, Northern Virginia, or Tokyo) to ensure localized data sovereignty and low-latency throughput.

7. Your Rights Under GDPR

As an individual residing in the EU/EEA, you possess comprehensive statutory rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete information.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your reservation data and email at any time (including self-service cancellation directly through the reservation interface or by contacting our team).
• Right to Withdraw Consent (Art. 7(3)): You may withdraw your consent at any time by canceling your reservation, unsubscribing from any invitation email, or emailing privacy@timesinkdb.com.
• Right to Lodge a Complaint: You have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).

8. Data Retention

Pre-launch reservation data is retained during the pre-launch phase and onboarding rollout. You may cancel your reservation at any time to remove your entry. Unactivated pre-launch records are purged following commercial launch onboarding, while records for converted users are maintained under standard customer account retention schedules.

9. Updates to this Policy

We may update this Privacy Policy to reflect evolving technical specifications or legal requirements. Material updates will be highlighted on our homepage prior to taking effect.