Privacy

We process the email address submitted, when it was created and confirmed, and confirmation credential metadata: hashed link and code values, expiry and consumption times, failed attempts, and the safe return destination. Raw confirmation links and codes are not stored in the database.

The signup path also processes an IP address and technical request data for rate limiting, abuse prevention, service security, and infrastructure logs. We do not ask for a name, employer, payment details, or an investment portfolio during preview.

We use the address to send its confirmation credential and, after confirmation, MoveableAlpha launch updates from Qorra Labs. Following, filing alerts, and in-product email controls are not active today. Consent is the basis for launch updates; service operation, fraud prevention, and security are handled for the legitimate interest of running a safe signup service.

Confirmation is double opt-in: an address is not treated as confirmed until the emailed link is opened. We do not sell or rent addresses, or share them for another organisation’s own marketing.

Railway hosts the web service, API, and database. Resend delivers the confirmation and launch mail and may hold the confirmed audience. Sentry receives technical error data only when error reporting is enabled; browser error replay, when enabled, masks all text and inputs and blocks media. These providers process data to operate or protect the service, not for their own marketing.

Provider locations and subprocessors can change. Contact us for the safeguards applicable to an international transfer involving your information.

Confirmed and unconfirmed address records are kept while the launch list operates or until a valid deletion request is completed. Confirmation credentials expire and then become eligible for scheduled deletion. Security logs and optional error telemetry are retained under the provider settings needed to investigate and resolve service incidents.

You may withdraw consent for launch updates, request access or correction, ask for deletion or restriction, or object to processing. During preview these requests are handled by email rather than a self-service control. We will verify and act on a request under the law that applies; withdrawing consent does not change processing that was lawful before withdrawal.

You may also complain to your national data-protection authority. In the United Kingdom that is the Information Commissioner’s Office.

Write to privacy@qorralabs.com for privacy questions or requests. Include the address concerned; do not send a confirmation link or code.