Privacy Policy

Effective Date: May 23, 2026

What you need to know in 30 seconds

  • What we collect: We collect the information you provide in the waitlist form (name, email, organization, role) and standard technical logs.
  • Why we collect it: To manage waitlist applications, communicate product updates, and ensure site security.
  • Who sees it: Your data is shared only with our essential service providers (Vercel, Resend, Neon). We do not sell your data.
  • Your rights: Under GDPR and UK-DPA, you have the right to access, correct, or delete your data at any time.
  • Contact: Questions? Email privacy@tobb.world.

1. Who We Are

TOBB.world is operated by the TOBB Imperial House of Technology ("we", "us", or "our"). We are the data controller for the personal information collected through this website.

2. What We Collect

We limit our data collection to what is strictly necessary for our current waitlist-only phase:

  • Waitlist Information: Full name, professional email address, organization/project name, role, primary focus, and any optional notes you provide.
  • Technical Data: Standard server logs, including your IP address, browser type, and time of access, used for security and debugging.

Note: This site does not use cookies for analytics or tracking.

3. Why We Collect It

We process your information for the following purposes:

  • To evaluate and manage waitlist applications.
  • To send confirmation emails and product updates (only if you have requested them).
  • To maintain the security and integrity of our website.

4. Legal Basis for Processing

Under the GDPR and UK-DPA, we rely on the following legal bases:

  • Consent (Art. 6(1)(a)): For processing the information you voluntarily provide in the waitlist form.
  • Legitimate Interests (Art. 6(1)(f)): For maintaining server logs to ensure the security and performance of our infrastructure.

5. Sub-processors

We use a limited number of trusted service providers to operate our platform:

6. Data Retention

Waitlist data is retained until the official product launch and for up to 12 months thereafter, unless you request earlier deletion. We retain technical logs for a shorter period, typically 30-90 days, as required for security purposes.

7. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Request that we correct inaccurate information.
  • Erasure: Request that we delete your data ("right to be forgotten").
  • Portability: Request a transfer of your data to another service.
  • Objection: Object to our processing of your data.
  • Withdrawal: Withdraw your consent at any time.

To exercise these rights, please contact us at the email address below.

8. International Transfers

As we use global infrastructure providers like Vercel, your data may be transferred to or stored in locations outside the UK or EEA. Where such transfers occur, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

9. Children's Privacy

Our service is not directed at individuals under the age of 18. We do not knowingly collect information from children.

10. Changes and Contact

We may update this policy from time to time. Significant changes will be announced on our website or via email.

Contact: privacy@tobb.world
[Placeholder for Glen: Confirm contact email and physical address if required]