Skip to main content

In a life-threatening situation?

Get immediate crisis support

Privacy Policy

Effective Date: August 10th, 2026

Reassurance AI is currently in a pre-launch period. You can browse our website, read about what we're building, and join our waiting list, but account creation, chat, journaling, and all other product features are not yet available. This Privacy Policy describes the only data processing that happens during this period. When the full service launches, we will publish an updated policy covering it before any new processing begins.

1. Information We Collect

1.1 Waiting List

When you join our waiting list (on the waitlist page or through the newsletter form in the site footer), we collect:

  • Your email address, stored encrypted in our database.
  • Signup details: which form you signed up from, the version of the consent notice you saw, and timestamps for when you joined, confirmed, and were last emailed.
  • A confirmation token, stored only in hashed form, used to verify your confirmation and unsubscribe links.

We use double opt-in: after you sign up, we send a confirmation email, and you're only added to the list once you click the confirmation link. We do not store your IP address with your waiting-list entry.

1.2 Website Analytics

We use Plausible Analytics, a privacy-focused, EU-based analytics service, to understand overall site traffic. Plausible does not use cookies and does not collect or store personal data. We only see aggregated statistics such as page views, referral sources, and anonymous interactive element statistics. It processes only this aggregated, non-identifying data on our behalf (see Section 5).

1.3 Service Logs and Security

Like most websites, our servers keep operational logs to keep the site secure and reliable. These logs are diagnostic by design: they record things like the endpoint requested, a response status, a timestamp, an internal correlation ID, and error details, and they are designed not to include personal data. We do not write your IP address or email address to these application logs.

We do temporarily process IP addresses in memory to rate-limit requests and protect the site from abuse; these rate-limiting records are not written to our database. Our website is delivered through Cloudflare, a content delivery and security network; Cloudflare processes IP addresses and request metadata at the network edge to route traffic, defend against denial-of-service attacks, and block malicious bots before they reach our servers. Our application logs are forwarded to DataDog, a logging and monitoring service, so we can detect and fix problems. Logs are used only for security, debugging, and reliability, never to build profiles of visitors, and are retained by our logging provider for approximately 15 days.

2. How We Use Your Information

  • Launch news and product updates: Your email address is used to send you news about our launch and occasional product updates — exactly what the signup form says, and nothing else. Every email we send includes an unsubscribe link.
  • Subscription service emails: We send emails needed to manage your subscription itself, such as the confirmation email and a notice if you try to sign up with an address that's already on the list.
  • Site improvement: Aggregated, anonymous analytics help us understand which pages are useful.
  • Security and reliability: Logs and error monitoring help us keep the site available and protect it from abuse.

We do not sell your personal data, and we do not share it with third-party marketers or advertisers. The only third parties that touch your data are the service providers listed in Section 5, acting on our instructions.

3. Data Storage and Security

  • Waiting-list data is stored in a MongoDB database hosted by DigitalOcean in Frankfurt, Germany (in the European Union) and is encrypted in transit and at rest.
  • Confirmation and unsubscribe tokens are stored only as cryptographic hashes; the links in your email are the only place the usable token exists.
  • Confirmation and update emails are sent through Amazon SES from an EU region (France).

4. Data Retention and Deletion

  • Unconfirmed signups are deleted automatically after 7 days if you don't click the confirmation link.
  • Confirmed subscriptions are kept until you unsubscribe.
  • Unsubscribing (via the link in any email) permanently deletes your entry from our database — we don't keep a copy or a suppression record.
  • You can also ask us to delete your data at any time by emailing [email protected].

5. Third-Party Service Providers

We have data processing agreements in place with the providers that process data on our behalf:

6. International Data Transfers

Your waiting-list data is stored in the European Union, but some processing happens in the United States: our application servers are hosted by DigitalOcean in the United States, and our logging provider, DataDog, is US-based. In practice this means your email address is handled on US-based infrastructure while your signup is being processed, even though it is stored in the EU, and our operational logs (which are designed to exclude personal data) are processed in the US. Where personal data is transferred to the United States, we rely on our providers' Data Processing Agreements and Standard Contractual Clauses as the safeguard. You can request a copy of these safeguards by emailing [email protected].

7. Legal Basis for Processing

  • Consent (GDPR Art. 6 (1)(a)) for the waiting list — you opt in twice, and you can withdraw consent at any time by unsubscribing.
  • Legitimate interests (GDPR Art. 6 (1)(f)) for service logs, rate limiting, and error monitoring — keeping the site secure and working.

8. Your Rights

Depending on where you live (including under the GDPR and the CCPA), you have the right to:

  • Access and correct the personal data we hold about you.
  • Delete your data (unsubscribing does this immediately for waiting-list data).
  • Object to processing, or withdraw consent at any time.
  • Restrict our processing of your data in certain circumstances.
  • Receive a copy of your data in a portable format.
  • Complain to your local data protection authority if you believe we've mishandled your data.

To exercise any of these rights, contact us at [email protected].

9. Age Requirement

Reassurance AI is intended for people aged 16 and over. Please don't join the waiting list if you're under 16; if we learn we've collected an email address from someone under 16, we'll delete it.

10. Cookies

The pre-launch website sets no cookies of our own. The one exception comes from our delivery network: Cloudflare sets a single essential security cookie (__cf_bm) to protect the site from automated abuse. It expires after about 30 minutes and is not used to track you across sites. Our analytics provider, Plausible, is cookie-free by design. See our Cookie Policy for details.

11. Changes to This Policy

We may update this Privacy Policy from time to time — including a full update when the Reassurance AI service launches. Changes will be posted on this page with an updated effective date.

12. Contact Us

Reassurance AI is operated by Reassurance AI LLC, the data controller responsible for your personal data, located at 2037 Lemoine Avenue, Suite #271, Fort Lee, NJ 07024, USA. Questions about this policy or your data? Email us at [email protected].