The human-readable legal bit
Privacy Policy
This policy explains how Thicle Sarl-S handles personal data when you visit the BanterBolt website or join the private beta waitlist. It does not yet govern the BanterBolt application; invited testers will receive separate product privacy information before access.
1. Who controls your data
Thicle Sarl-S
3 Um Paerchen
8352 Dahlem, Luxembourg
Company number: B265768
VAT: LU33898674
Privacy and legal enquiries: contact@thicle.com
Product enquiries: info@banterbolt.com
2. Data we collect
- Waitlist data: your email address, consent timestamp, source, status, and the policy version you accepted.
- Technical and security data: limited request data made available by our hosting provider, such as IP address, browser information, request time, and error or security logs.
- Analytics data: page views, approximate location, device type, and interactions, but only if you accept analytics cookies.
- Messages: information you send when contacting us.
3. Why we use it
| Purpose | Legal basis | Typical data |
|---|---|---|
| Manage the waitlist, invitations, and essential beta access messages | Your consent and steps requested before access | Email and waitlist status |
| Operate, secure, and troubleshoot the website | Our legitimate interests in providing a secure website | Technical logs |
| Measure website use | Your consent | Google Analytics data |
| Respond to enquiries and comply with law | Legitimate interests or legal obligation | Contact messages and records |
4. How we communicate
We use waitlist emails only for waitlist status, invitations, and essential beta access information. We do not add waitlist addresses to an unrelated newsletter, sell them, or provide them to third parties for their own marketing. You can withdraw at any time by emailing info@banterbolt.com.
5. Providers and transfers
We may use Vercel for hosting, Neon for database storage, Resend for transactional email, and Google Analytics if you consent. These providers process data on our behalf under their terms and data-protection commitments. Some may process data outside the European Economic Area. Where required, we rely on an adequacy decision or approved safeguards such as Standard Contractual Clauses.
6. Retention
- Waitlist records are removed after 24 months of inactivity, or earlier if you withdraw.
- Google Analytics event data is configured for 14 months.
- Security logs are retained only as long as reasonably needed for security, diagnostics, and legal obligations.
- Correspondence is retained as needed to resolve the enquiry and meet legal obligations.
7. Your rights
Under applicable data-protection law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent at any time without affecting earlier lawful processing. Contact contact@thicle.com. We may need to verify your identity.
You may also complain to Luxembourg’s data protection authority, the Commission nationale pour la protection des données (CNPD), or another competent supervisory authority.
8. Cookies and automated decisions
See our Cookie Policy. The website does not make decisions producing legal or similarly significant effects about waitlist visitors.
9. Changes
We may update this policy when the website, providers, or law changes. We will post the new effective date here. Material changes affecting waitlist members may also be communicated by email.