← Home

Northgiven Waitlist Privacy Notice

Version 1. Effective October 25, 2026. Last revised October 25, 2026.

Northgiven LLC operates this email list. This notice explains how we handle information when you request an email announcing public signup and, if you choose, emails about beta testing.

Joining does not create a Northgiven member account, reserve a beta place, authorize payment, or mean that Northgiven will be available where you live. Member accounts and participation in a beta have their own applicable notices and permissions.

Contents

1. Your email choices

The form asks for your email address and a declaration that you are 18 or older. Submitting it requests one email announcing general public signup. The optional beta-contact choice starts unchecked and asks us to email you about beta-testing availability and invitations. It does not promise an invitation or admission.

Launch interest is part of the initial request. You can later withdraw launch permission and keep beta-contact permission if you chose and confirmed it, or leave both.

We send a confirmation email. Open its link, review your choices, and select Confirm my email. Opening the link alone does not subscribe you. These choices do not authorize newsletters or unrelated promotions.

The confirmation email is separate from the requested launch announcement or beta contact. We may also respond to a support or privacy request you make.

2. Information we collect

We collect:

The application stores your email in encrypted form and uses a separate protected lookup value to recognize the same address. These protections do not make the information anonymous.

This form does not ask for a name, ZIP code, country, birth date, profile, assessment answers, government identification, or payment information. Please do not include intimate or other unnecessary sensitive information in a support message.

3. Why we use it

We use this information to confirm and record your choices, send the emails you requested, honor withdrawals and expiry dates, resolve delivery problems, answer requests, and protect the service from abuse. We also keep limited records to prevent a restored backup from reviving permission you withdrew.

Where data-protection law requires a legal basis, we rely on your consent for the launch announcement and separately chosen beta contact. We rely on our legitimate interests in operating a secure service and honoring email choices for proportionate security, delivery, and permission records. We process information to meet legal obligations when those obligations apply.

Providing an email address and the adult declaration is voluntary, but both are needed to submit this request. Beta contact is optional. Declining it does not affect launch interest.

This list is not used for relationship matching or decisions with legal or similarly significant effects. Automated controls can limit requests or stop delivery because of abuse, delivery failures, complaints, withdrawn permission, or expiry.

4. Providers and other disclosures

We use these service providers for the list:

These providers receive information needed for their functions. They may use subprocessors to support those functions. We keep protected database archives in encrypted form on computers and storage devices controlled by Northgiven's authorized personnel, separately from Cloudflare's limited permission-recovery records.

Authorized personnel may access information when needed to operate the list or respond to a request. We may disclose information where legally required or reasonably necessary to investigate abuse, protect rights or safety, or respond to a valid legal process.

We do not sell or rent this list, share it for cross-context behavioral advertising, or authorize others to use it for their own marketing. Joining does not make your address visible to other people on the list.

5. Browser storage and tracking

The website can store a light, dark, or system appearance preference in your browser's local storage. You can remove it through your browser settings. It is separate from your email permission.

This signup and management flow adds no advertising trackers or analytics that follow you across unrelated websites. Because the application does not perform that cross-site tracking in this flow, it does not respond differently to browser Do Not Track signals.

We do not use email open or click tracking in these messages. We still process delivery, bounce and complaint events and requests to confirmation or management links.

6. How long information stays

Unconfirmed requests. The original unconfirmed request expires 14 days after it is created. Changing or repeating it does not extend that pending window. The confirmation email shows the exact deadline. Repeating a request does not extend an existing confirmed permission.

Confirmed permissions. Each confirmed purpose ends when you leave it or 18 calendar months after confirmation, whichever is earlier. Launch permission also ends 60 days after the general public-launch announcement begins if that is sooner. If public launch has not occurred by your permission's expiry, the permission still ends. There are no automatic renewals or renewal reminders.

Active address and queued messages. When no current request or permission needs your address, cleanup removes the encrypted address, its lookup value, and queued email payloads from the active list. Another active purpose or unexpired request can keep the shared address. Expiry ends permission even if cleanup is delayed.

Application delivery records. Finished email-job records become eligible for deletion 30 days after their original completion. Scheduled cleanup removes eligible records. It also removes ended requests and permissions once they are no longer needed by an active request, permission, or remaining delivery record. Separate recovery history, including withdrawal records, remains as described below. This is a cleanup threshold, not a promise that every copy disappears at that moment.

Request limits. IP-based application rate-limit records use one-hour windows. A record is marked to expire two hours after its latest window starts, and expired records are scheduled for cleanup every 15 minutes. Repeated requests can refresh a record. A cleanup failure can delay physical removal. These records are separate from provider logs.

Recovery and suppression. Limited recovery records keep internal identifiers, choices, generations and deadlines so an older backup cannot restore withdrawn permission. They do not contain your email address, its protected lookup value or email-link tokens, but we do not treat them as anonymous. They are excluded from ordinary cleanup and currently have no automatic expiry. Bounce, complaint and suppression records can also remain to prevent unwanted or undeliverable messages. We review the need for these records at least every three months and retain what remains necessary while sending systems or recoverable copies could revive contact. A retained protective record does not authorize renewed marketing.

Provider delivery and hosting records. Resend's standard email and delivery-log retention is 30 days, with a separate seven-day backup window. Suppression records have a separate protective purpose. Render's current hosting configuration provides seven days of dashboard runtime logs and three days of database point-in-time recovery. Render-created logical database exports are retained for at least seven days; downloaded database archives follow our archive rule below. Provider security and account records can have different periods. These windows do not create one deletion deadline for every copy.

Our database archives. Routine database archives created after this list opens follow a seven-day rolling period. A specific copy can remain longer when needed for a documented legal hold, an identified security incident or safe recovery from a specific failure. We restrict that copy's use, record its reason and review date, and delete it when the documented need ends.

Support and privacy requests. Support and privacy-request messages, attachments and temporary copies are scheduled for deletion from our working records 30 days after the case closes. We keep only a minimal restricted record of a privacy request for 24 calendar months after closure: its date, type, verification method, outcome and necessary action references. That longer period does not apply to the full correspondence. A documented legal or security matter can require limited relevant evidence to remain longer. After permanent deletion in Google Workspace, administrator recovery can remain available for up to 25 days, subject to separate retention rules or holds. Google's accepted data-processing terms allow up to 180 days to complete deletion from its systems after an effective permanent-deletion instruction.

You can ask us about the records and retention relevant to your request. Removal from the active list does not recall a message already delivered to your inbox.

7. Leaving and managing your choices

Use the management link in an email to leave the launch list, the beta-contact list, or both. You do not need a Northgiven member account. On our management page, opening the link alone does not remove you; the page asks you to select the action. Your email service may also offer an unsubscribe control for these messages. When it uses our unsubscribe endpoint, that action removes both email choices and cancels any pending request for that address. If you never confirm or cancel a request, it expires on its own.

Leaving one purpose does not withdraw a separate permission you chose to keep. An email already being delivered may still arrive. We do not use that possibility as permission to start another send after withdrawal.

You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. If your link is unavailable or does not work, contact support@northgiven.com for help.

8. Privacy requests and your rights

Contact support@northgiven.com to ask about your information or request access, correction, a copy, or deletion. Depending on applicable law, you may also have rights to portability, restriction, objection, an authorized representative, or an appeal of our response. We will consider requests and honor the rights that apply to you.

Your right to object. Where applicable law provides this right, you can object to processing based on legitimate interests. You can always withdraw your launch or beta email permission as described above.

We may need reasonable information to confirm that a request concerns your address or that someone is authorized to act for you. We do not require a member account to make a privacy request. Please do not email identity documents unless we first arrange an appropriate secure process.

We check the support inbox each business day and aim to complete ordinary requests within 15 calendar days. We follow any shorter deadline required by applicable law. You can reply if you disagree with our response. We aim to have another handler review it, and we honor any review or appeal right and deadline that applies.

If we cannot grant a request in full, we will explain the reason and any available review or appeal. For example, limited information may need to remain to honor an opt-out or meet a legal obligation. You may complain to the data-protection authority or other regulator responsible for privacy in your jurisdiction where that right applies.

9. International processing

Northgiven LLC is based in the United States. When you submit the form, you provide your information to us through our US-hosted application. Our Render application and database are in Virginia, and Resend stores the email information it handles in the United States. Our Cloudflare recovery storage uses Eastern North America as a location preference within its default jurisdiction. Google Workspace and our other providers may use facilities, personnel and subprocessors in other countries to operate and support their services. We do not make a country-specific storage guarantee. Privacy protections can differ between countries.

Data-processing terms for Render, Resend, Google Workspace and Cloudflare include confidentiality, security and limits on processing. They also contain contractual safeguards for transfers covered by European data-protection laws, including standard contractual clauses and UK terms where applicable.

Contact us for information about the safeguards relevant to your information and how to obtain a copy where available. This list records interest without asking for your country and does not promise that member service is available in your location.

10. Adults and security

This list is for people 18 or older. The adult declaration is not independent age verification. If you believe an under-18 person's information has been submitted, contact us so we can investigate and address it.

We use safeguards including encrypted application storage and restricted access to protect information. No service can guarantee absolute security. Keep your confirmation and management links private because they provide access to your email choices.

11. Changes to this notice

We will post revisions here with an updated date and version. We will announce material revisions on the signup and management pages. Where required by law, we will also notify affected people directly before a change applies to their information.

An update does not extend an expiry date or create permission for a new purpose. If a change requires fresh consent, we will request it before using your information for that purpose.

12. Contact Northgiven

Northgiven LLC
7901 4th St N #STE 300
St. Petersburg, FL 33702, USA

Email: support@northgiven.com