Privacy Policy

This website and the Twixt waitlist are run by Twixt (“Twixt”, “we”, “us”). We decide how and why your personal data is used, so we are its controller (a “data fiduciary” under India’s Digital Personal Data Protection Act, 2023).

For anything about your data, write to legal@getittwixt.com.

Your email address. This is the only required field.

Optional details you choose to add: your name, your company, what brings you here and what you would like your agent to do.

A referral code we create for you, and a link to whoever referred you, if anyone did.

A one-way hash of your IP address. We do not store the raw IP address.

The time you joined, and whether a confirmation email was sent.

Short-lived rate-limit counters, keyed to the hashed IP address.

We don’t ask for sensitive personal data, such as health, financial account or government ID details, and we ask you not to put it in the free-text field.

To run the waitlist and work out your position.

To count verified referrals and apply the referral rules.

To stop spam and abuse. This includes a hidden spam trap, rate limits, a disposable-domain check and a same-IP referral check.

To contact you about early access and tailor it to what you told us you need.

Where the EU or UK GDPR applies, we rely on your consent to add you to the waitlist and contact you about early access, and on our legitimate interests to keep the site and the waitlist secure and free of abuse. Under India’s DPDP Act, 2023, we rely on the consent you give when you join and on the legitimate uses the Act allows. You can withdraw consent at any time by writing to us or leaving the waitlist. Withdrawal doesn’t affect anything we did before it.

We don’t sell your personal information, and we don’t share it for cross-context behavioural advertising.

We don’t use it for advertising or build advertising profiles.

We don’t show your email to other people. Your referral link holds a code, not your email.

We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

This site uses only essential browser storage. It remembers your cookie-banner choice. If you arrive through a share link, it keeps the referral code until you join or close the tab.

We use Vercel Web Analytics, which is cookieless. It counts page views and clicks in aggregate. We send it no names, emails or form text.

We set no advertising or tracking cookies. If we add non-essential cookies later, we will update this policy first, and they will follow the choice you set in the cookie banner.

Vercel: hosts the website and provides the cookieless analytics.

Supabase: stores the waitlist database in India (AWS ap-south-1, Mumbai).

Resend: sends the waitlist confirmation email, if confirmation emails are switched on.

These providers act only on our instructions, under written agreements that require them to protect your data.

We operate from India and our providers may process data in India, the United States, the European Union and other countries. When personal data from the European Economic Area, the UK or Switzerland goes to a country without an adequacy decision, we rely on the European Commission’s standard contractual clauses (with the UK Addendum where relevant) or another lawful transfer mechanism. Transfers from India follow the DPDP Act and any restrictions notified under it.

We keep your waitlist data until you leave the waitlist or for 24 months after our last contact with you, whichever comes first. Then we delete it or make it anonymous. Rate-limit counters are deleted after a short window.

Wherever you are, you can ask to see the data we hold about you, correct it, delete it or leave the waitlist, and you can withdraw your consent at any time.

EU, EEA and UK: you also have the right to restrict or object to processing, to data portability and to complain to your local data protection authority.

India (DPDP Act, 2023): you can ask for a summary of your data and how it is processed, have it corrected, completed, updated or erased, use our grievance process, nominate someone to act for you, and complain to the Data Protection Board of India.

California (CCPA/CPRA): you have the right to know what personal information we collect and how we use it, and to delete and correct it. We don’t sell or share personal information and don’t use sensitive personal information, so there is nothing to opt out of. We won’t treat you differently for using your rights, and an authorised agent can make a request for you.

To use any of these rights, email legal@getittwixt.com. We may need to confirm it is you before we act. We will reply within 30 days.

We limit who can access waitlist data, encrypt it in transit and hash IP addresses. No system is perfectly secure, so we can’t promise absolute security. If a breach affects your data, we will tell you and the relevant authorities as the law requires.

You must be 18 or older to join the waitlist. We don’t knowingly collect data from anyone under 18. If we learn that we have, we delete it.

We will post any change here and update the date at the top. If a change is significant, we will tell people on the waitlist by email before it applies.

Questions, requests or complaints about privacy: legal@getittwixt.com. This address also reaches the person who handles grievances under the DPDP Act.