Early access privacy notice.
A short, operative notice covering one thing: the personal data the early access form on this site collects, and what happens to it.
In force now. This page is operative from the date above, because it covers something happening today rather than something that starts at launch. We will not change it retroactively: if it is amended, the date above changes and the previous version stays available on request from legal@openpush.ai.
Why this page exists separately
Most of the legal pages on this site take effect when OpenPush opens on 17 August. That is the right date for terms governing a product nobody can use yet — nobody has agreed to them, and nothing is running under them.
It is the wrong date for a privacy notice, because the waitlist form is already collecting real email addresses from real people. Data being collected today needs a notice that is in force today. So this page is separated out, kept short enough to read in full, and operative from 5 August 2026. When the full Privacy Policy takes effect it replaces this notice for everything it covers; until then, this page governs the waitlist.
Who is collecting it
SuperTuned Inc, 1 Sansome Street, San Francisco, CA 94104, USA. We are the controller for the waitlist data described below. There is no EU or UK representative appointed; if that matters to you, please write to us before signing up rather than after.
What the form collects
Only the email field is required. Everything else is optional and the form works without it. This list is generated from the database schema, so it cannot quietly fall out of date:
- What you type into the form. Email address, and optionally your name, your studio or company, and your app or store URL. Optionally which push provider you use today, roughly how many monthly active users you have, and which platforms you need.
- How you got here. UTM campaign parameters if the link you followed carried them, the referring site, and the page you were on when you submitted the form.
- Technical context of the request. Your browser's user-agent string, the country our edge network reports, and a one-way salted SHA-256 hash of your IP address. We do not store raw IP addresses at any point.
- Our own record-keeping. When you signed up, how many times you have submitted the form, whether we have sent you the confirmation email, and an opaque token that powers your unsubscribe link.
We do not store your raw IP address at any point, we set no cookies, and no third party receives anything about your visit — there is no analytics script or tracking pixel on this site to send it to. See the cookie notice, which is checked on every deploy.
What we use it for, and on what basis
To tell you when OpenPush opens, to work out the order in which to open onboarding slots, and to answer you if you asked us something. If you told us you are coming from another push provider we will use that to prioritise a migration slot. That is the entire purpose.
Where GDPR or UK GDPR applies, the basis is your consent, given by submitting the form. You can withdraw it at any time using the unsubscribe link in any email we send you, or by writing to privacy@openpush.ai. Withdrawing consent does not affect anything we did before you withdrew it.
Who else sees it
The waitlist is stored in a managed Postgres database operated by Supabase in the United States, and this site is hosted by Railway in the United States. If and when we switch on the confirmation email, the sending provider will receive your email address in order to deliver it. Nobody else receives this data. We do not sell it, we do not share it with advertisers, and we do not use it to train anything. The full list, kept dated, is on subprocessors.
How long we keep it
Until OpenPush opens and you either become a customer or tell us you are not interested, and in any case no longer than 24 months from your last contact with us. If you ask us to delete it we will do so, and confirm, within 30 days.
We should be straight with you about one thing: the automated erasure and retention tooling described in the Privacy Policy and DPA is not built yet. Deletion of waitlist data today is a manual operation performed by a person. It works, and we will do it on request — it just is not yet a button.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to our using it. Write to privacy@openpush.ai and we will come back to you within 30 days. If you are in the EEA or the UK you also have the right to complain to your national supervisory authority.
Changes
If we change what the form collects or what we do with it, we will update this page and the date at the top of it before the change takes effect — not after.
SuperTuned Inc
1 Sansome Street, San Francisco, CA 94104, USA
Privacy: privacy@openpush.ai · Legal: legal@openpush.ai · Security: security@openpush.ai