Privacy Notice

Effective date: November 8, 2026 · Last updated: November 8, 2026

What this notice covers. Ticinuum is not yet available, and we are not processing anyone’s source code, tickets or engineering content. This notice covers what exists today: our websites, the email waitlist, and business correspondence with us.

Product privacy. We will publish a privacy notice for the Ticinuum product before any deployment is offered. Prospective customers can ask for our product data-handling guide at privacy@ticinuum.com.

Who we are and what this notice covers
The short version
Visiting our websites
Joining the waitlist
Emailing us, calls, and meetings
Who receives your information
How long we keep it
Your rights and choices
California notice at collection
Visitors outside the United States
Children
Security
Changes to this notice
Contact us

1. Who we are and what this notice covers

This notice is published by Ticinuum Labs, LLC, a limited liability company organised under the laws of the State of Colorado (“Ticinuum”, “we”, “us”). We decide why and how the information described here is used.

It covers:

our website at ticinuum.com, and the copy of it at ticinuum.dev;
our documentation site at docs.ticinuum.com (together with the website, “the sites”);
the email waitlist you can join on the website; and
correspondence, calls and meetings with us, including with prospective customers.

It does not cover other companies’ websites that the sites link to, which have their own policies.

2. The short version

Visiting the sites: our web servers log each request, including your IP address. Website pages run Cloudflare Web Analytics, which sets no cookies; we see aggregate statistics only.
We set no cookies. Your browser’s local storage holds a few display preferences, and only if you change them.
Joining the waitlist: the form asks only for your email address. We also keep your IP address, your browser’s user-agent string and which form you used. You are not on the list until you click the link in the confirmation email.
Retention: unconfirmed signups are deleted after 30 days, and server logs after 30 days. A confirmed waitlist entry is kept until you ask us to remove it, and no longer than 12 months after Ticinuum first becomes available to customers.
We do not sell or share your information for advertising, and the sites have no advertising or tracking pixels.
To ask anything, or to exercise a right: privacy@ticinuum.com.

3. Visiting our websites

3.1 Server logs

The website is served from our own servers, hosted on Google Cloud in the United States. Our web servers log every request: your IP address, the date and time, the page or file requested, the response, and details your browser sends, such as its user-agent string and the page that referred you. We use these logs to run the sites, fix problems, and detect and stop abuse.

3.2 Analytics

Every page of the website loads Cloudflare Web Analytics. When a page loads, and when you leave it, the script reports the page view to Cloudflare, which receives your IP address and browser details with that report. Our dashboard shows only aggregate figures: pages viewed, referring sites, visitors’ countries, browser, operating-system and device types, and page speed. None of it is linked to your email address. Cloudflare states that Web Analytics uses no cookies or browser storage and does not fingerprint visitors.

The documentation site runs no analytics.

3.3 The roadmap page’s live feed

The website’s roadmap page loads a feed of our recently deployed changes from Google Cloud Storage. Your browser makes that request directly, so Google receives your IP address, your browser’s user-agent string, and the address of the page that made the request. The feed contains no information about you.

3.4 Cookies and local storage

The sites set no cookies.
Local storage holds display preferences, and only if you change them: on the website, your light or dark theme and whether the roadmap replay plays on arrival; on the documentation site, your theme and the programming language you chose for code samples. None of them identifies you, and none is sent to us. You can clear them in your browser at any time.
The Turnstile check on the waitlist form, where it appears, runs in a frame served by Cloudflare under Cloudflare’s own terms (§4.3).

Fonts are served with the sites, so no font provider is contacted. The documentation site’s search runs in your browser.

3.5 Links to other sites

The sites link to other companies’ sites, including a scheduling tool. Those sites have their own privacy policies. If you book a call through a scheduling link, the scheduling service receives what you enter under its own terms, and we receive the booking.

4. Joining the waitlist

The Waitlist terms govern the list. This section describes the information involved.

4.1 What the form collects

The form asks for one thing: your email address. It has no field for a name, company, job title, phone number or message. If you want to tell us more, reply to an email from us; that becomes correspondence (§5).

Your waitlist entry holds:

Information	Where it comes from	Why
Email address	You enter it	To send the confirmation email and, once you confirm, the email the Waitlist terms describe
Which form on the page you used	The form	To learn which part of the page works
IP address	Your connection	Rate limiting and abuse prevention
Browser user-agent string	Your browser	Abuse prevention
Status (unconfirmed or confirmed) and dates	Set by the service	To know whether you completed the double opt-in, and to apply §7

4.2 Double opt-in

Submitting the form creates an unconfirmed entry and sends you one email with a confirmation link. You are not on the list until you click it. The link expires after 72 hours. It contains your email address, so anyone who has the link can see the address and confirm it; treat it like any other link sent to you. Submitting an address that is already confirmed sends nothing.

4.3 Anti-abuse checks

Before we store or send anything, the service checks that the submission is not automated, that it is not coming in too fast from one IP address, that the email domain can receive mail and is not a known disposable-email domain, and, where the form shows it, the result of Cloudflare Turnstile. Checking the domain looks up its mail records; it does not contact your mailbox.

To tell people from bots, Turnstile processes signals from your browser, including your IP address, user-agent string and a TLS fingerprint. Cloudflare states that it processes those signals on our behalf to provide the check, and as a controller in its own right when it uses them to improve its bot detection.

4.4 What we use it for

We send you the confirmation email. Once you confirm, we may send you launch and product news, invitations to a demo or a conversation, and occasional questions about what you need. We will not send that kind of email until every message carries a working unsubscribe link and our postal address (Waitlist terms §6.2). We also look at the size and make-up of the list to judge demand.

4.5 Where your address can also appear

Service logs. The waitlist service logs your address if a confirmation email to you fails to send or a confirmation fails.
Web server logs. When you click the confirmation link, our web server logs the request, and the link contains your address.

These logs are deleted on the schedule in §7.

5. Emailing us, calls, and meetings

If you write to us, book a call or meet us, we keep what you send and tell us: your name, company and role if you give them, the content of your messages, and our notes of calls and meetings. We use it to answer you, to decide whether a pre-release program might suit you, and to manage a business relationship. If you negotiate or contract with us, we keep those records too.

Please do not send us confidential information, credentials, source code, or personal information about other people. The Waitlist terms (§7) explain why.

6. Who receives your information

6.1 Service providers

Provider	What it does for us	What it receives
Google Cloud	Hosts our web servers and their logs, and stores the roadmap feed	Server-log data (§3.1) and the roadmap-feed request (§3.3)
Cloudflare	Web Analytics on the website; Turnstile on the waitlist form, where shown	Page-view reports with your IP address and browser details (§3.2); Turnstile signals (§4.3)
Our hosting provider for the waitlist service	Runs the waitlist service and its database	Your waitlist entry (§4.1) and the service’s logs (§4.5)
Our email delivery provider	Sends the confirmation email and later waitlist email	Your email address and the messages we send you
Our email provider for our own mailboxes	Receives and stores mail you send us	Your messages to us
A customer-relationship tool, if we adopt one	Keeps track of conversations	Confirmed addresses and our notes of conversations (§5)

Each provider processes your information on our behalf and for the purpose listed. The exception is Cloudflare’s use of Turnstile signals to improve its own bot detection, for which Cloudflare is responsible as a controller (§4.3).

6.2 Other disclosures

We may also disclose information:

to our professional advisers, such as lawyers and accountants, under a duty of confidence;
where the law requires it, or in response to valid legal process;
where needed to protect the rights, safety or security of anyone, including us, or to investigate abuse of the sites; and
to a successor, if we are involved in a merger, acquisition or sale of substantially all our assets, in which case the waitlist may transfer with the business.

We do not sell your personal information or share it for cross-context behavioural advertising. We do not pass the waitlist to data brokers. The sites have no advertising or tracking pixels.

7. How long we keep it

Information	How long
Unconfirmed waitlist entries	Deleted automatically 30 days after the address was last submitted
Confirmed waitlist entries	Until you ask us to remove you (§8.3), and no longer than 12 months after Ticinuum first becomes available to customers
Server logs and waitlist service logs	30 days
Backups of the waitlist database	35 days. A deleted entry is gone from backups within 35 days of its deletion
Suppression record, if you ask for one (§8.3)	Until you ask us to remove it
Correspondence and meeting notes	While we are in contact, and then for up to 24 months after our last exchange. Records of a negotiation or contract are kept for as long as the law or the contract requires
Analytics	Kept by Cloudflare. Cloudflare states that it keeps unsampled analytics data for seven days and a sample after that

8. Your rights and choices

8.1 Your rights

Depending on where you live, privacy laws may give you some or all of the rights below, with conditions and exceptions. Whether a given law applies to us depends on facts such as our size and the context of our contact with you. We offer these rights to anyone who asks, wherever they live, whether or not a law requires it.

Know and access: what personal information we hold about you, where it came from, why we use it, who receives it, and a copy of it.
Correct inaccurate information.
Delete information we hold about you (§8.3).
Portability: a copy in a machine-readable form.
Withdraw consent to waitlist email at any time.
Opt out of sale, sharing, targeted advertising and profiling. We do none of these.
Not be discriminated against for exercising any of these rights. We offer no financial incentives for personal information.
Appeal if we refuse a request (§8.4).

8.2 How to exercise them

Write to privacy@ticinuum.com, saying which right you are using and the email address involved.

We acknowledge within 5 business days and respond within 45 days. If a request is complex, we may extend that once by 45 days and will tell you. Where the GDPR or UK GDPR applies to you (§10), we respond within one month, extendable by two months for complex requests.
We confirm the request comes from you, normally by confirming that you control the email address involved.
There is no fee, unless a request is manifestly unfounded or excessive.
An authorised agent may act for you with your written permission; we may still confirm with you.

8.3 Deletion and stopping email

These are two different requests.

Deletion. We delete your waitlist entry, and on request your correspondence, within 30 days of your verified request, and confirm in writing if you ask. Copies that remain afterwards are limited to: log lines that mention your address, which are deleted within 30 days (§4.5, §7); backups, which expire within 35 days; and records we must keep by law or to establish or defend a legal claim.
Stopping email. If you only want us to stop emailing you, we can delete your entry and keep a suppression record instead: your email address, the date of your request, and nothing else. We use it only to make sure we do not email you again, including if the address is submitted to the form later. Tell us if you want one. If you do not, we delete without keeping a suppression record, and you may need to ask again if the address is submitted later.

8.4 Appeals and complaints

If we refuse a request, you can appeal by replying to our decision or by writing to privacy@ticinuum.com and marking it as an appeal. We respond within 60 days, or sooner where your state’s law requires. If we maintain the refusal, we will tell you how to contact your state Attorney General. You may also complain to your state Attorney General or another regulator at any time.

9. California notice at collection

To the extent the California Consumer Privacy Act applies, this section is our notice at collection.

Category	What, specifically	Source	Why we use it	Who receives it	How long
Identifiers	Email address; IP address	You; your browser	Sending the email you asked for; abuse prevention; running and securing the sites	The providers in §6.1	§7
Internet or other network activity	User-agent string; pages requested and when; referring page; which waitlist form you used; aggregate page-view statistics	Your browser	Running, measuring and securing the sites; learning which parts of the page work	Google Cloud; Cloudflare; our waitlist hosting provider	§7
Professional information	Your company and role, only if you tell us	You	Answering you; deciding whether a program suits you	Our email provider; a customer-relationship tool, if we adopt one	§7

We draw no inferences about individuals and collect no sensitive personal information. We have not sold or shared personal information, including that of anyone under 16, and we make no disclosures to third parties for their own direct marketing.

10. Visitors outside the United States

Ticinuum will be offered to customers in the United States only, and the offering is not directed to the European Economic Area or the United Kingdom. The sites can be reached from anywhere, so where the GDPR or UK GDPR applies to our processing of your information:

Legal bases. Your consent for the waitlist and the email it brings, which you may withdraw at any time; and our legitimate interests in running, measuring and securing the sites and in answering and managing correspondence.
Your rights are to access, correct and erase your information; to restrict or object to its processing, including an absolute right to object to direct marketing; to portability; to withdraw consent; and to complain to a supervisory authority, which in the UK is the Information Commissioner’s Office and in the EEA is the authority where you live or work. Exercise them as in §8.2.
Transfers. Our servers are in the United States, so your information is processed there, and our providers may also process it in other countries.
We have not appointed a data protection officer or a representative in the EEA or the UK.

We make no automated decisions about you that have legal or similarly significant effects.

11. Children

The sites are for adults acting in a business capacity, and you must be at least 18 to join the waitlist. The sites are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, write to privacy@ticinuum.com and we will delete it.

12. Security

We collect little: an email address and the request details described above. The sites are served over HTTPS, and the confirmation link is signed and expires after 72 hours. We hold no security certification, such as a SOC 2 report or ISO 27001, and have had no independent penetration test.

If a breach affects your information, we will tell you, and any regulator, without undue delay and as the applicable law requires.

To report a security vulnerability, write to security@ticinuum.com. §3.3 of our Website terms of use sets out the rules for good-faith research and our commitment not to pursue researchers who follow them.

13. Changes to this notice

We update this notice when what we collect, or how we use it, changes, and the date at the top shows the current version. If we add a provider that receives information from your browser, we update §3 and §6 on the day it goes live. If a change materially affects the waitlist, we will email the confirmed list before it takes effect. Earlier versions are available on request.

14. Contact us

For	Write to
Privacy questions, requests about your information, and removal from the waitlist	privacy@ticinuum.com
Security vulnerabilities	security@ticinuum.com
Legal notices	legal@ticinuum.com; service of process on our registered agent on file with the Colorado Secretary of State
Anything else	hello@ticinuum.com

Ticinuum Labs, LLC, a Colorado limited liability company.

Contents