Privacy Policy

We may collect the following categories of information:

• Email address and waitlist signup timestamp when you join the waitlist.
• Confirmation that you accepted this Privacy Policy and our Terms (including time of consent, where stored).
• Basic technical data such as browser type, device type, and approximate usage analytics (via Vercel Analytics in production).
• Server and security logs generated by our hosting providers.

We use personal information only for legitimate purposes, including:

• Operating the waitlist and notifying you about launch updates.
• Improving website performance, security, and user experience.
• Complying with legal obligations and responding to lawful requests.
• Protecting our rights and preventing abuse or fraud.

Where the GDPR or similar laws apply, we rely on: (a) your consent when you join the waitlist; (b) our legitimate interests in operating and securing the website; and (c) legal obligations where required.

You may withdraw consent for marketing emails at any time by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

We do not sell your personal information. We use trusted service providers to run the site, including Supabase (database hosting) and Vercel (website hosting & analytics).

These providers process data on our instructions and under appropriate contractual and security safeguards.

We keep waitlist emails until you ask us to delete them or until they are no longer needed for launch communications, after which we delete or anonymize them.

Analytics and security logs are retained for limited periods according to our providers' policies and operational needs.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing.

California residents may have additional rights under the CCPA, including the right to know what we collect and to request deletion, subject to legal exceptions.

Under Israeli privacy law (including Amendment 13 to the Protection of Privacy Law), you may request access to or correction of personal data we hold about you, and we will respond as required by law.

To exercise your rights, email privacy@sofi.app. We may need to verify your request.

Sofi is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you believe a child provided us personal information, contact us and we will delete it promptly.

We implement reasonable technical and organizational measures, including encryption in transit (TLS) and access controls on our database.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Our service providers may process data in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

We may update this policy from time to time. We will post the revised version on this page with an updated date.

Material changes may be communicated by email to waitlist subscribers where appropriate.