Privacy notice

This notice explains what personal data this website and the VioPO waitlist collect and what we do with it. VioPO is not open yet: there are no accounts, and the site does not accept documents. When VioPO opens, this notice will be replaced by one that covers the service.

VioPO is run by Vio Labs LTD, company number 17466165, 128 City Road, London EC1V 2NX. Vio Labs LTD is the controller of the data described here.

Questions or requests: contact@viopo.co.uk.

Cookies and browser storage

This site sets no cookies. There is no analytics, advertising or tracking, and no third party scripts, fonts or images are loaded.

The site keeps two small settings in your browser's local storage:

• viopo-theme holds light or dark if you press the light and dark button.
• viopo-notice holds closed once you close the cookies and privacy notice.

They stay in your browser and are never sent to us. You can clear them in your browser settings at any time.

The waitlist

If you join the waitlist, we keep:

• your email address, as you typed it, with the part after the @ in lower case;
• the same address without any +tag (and, at Gmail, without dots), which we use only to stop one inbox being on the list twice;
• the date and time you joined;
• a short name for the wording of the box you ticked, so we know what you agreed to;
• the page of this site you joined from.

We do not store your IP address or your browser type with your entry.

If you ask to join by email, we add your address to the list in the same way and keep the same details.

We use your address for one thing: to email you once when VioPO opens. We do not send newsletters or marketing, and we do not share the list with anyone. The legal basis is your consent, which you give by ticking the box.

You can withdraw your consent at any time by emailing contact@viopo.co.uk from the address you joined with, or telling us which address it was. We then delete your entry. Withdrawing does not affect anything we did before.

We delete the list once the launch email has been sent, and at the latest six months after VioPO opens. If VioPO does not open, we delete the list and say so on this page. We back up the list once a day, on our own server, and keep the last 14 copies, so a deleted entry can remain in a backup for up to 14 days before it is gone. If we use an email delivery provider to send the launch email, we will name it in this notice before the email is sent.

When you join, we check the domain of your address against a list of disposable email services, and refuse those addresses. Nothing extra is stored for this check.

Limits on sign-ups

To stop the waitlist being misused, we count sign-ups each day (UTC). We never store your IP address for this. We store:

• a salted hash of your IP address (for an IPv6 address, of the /64 network it belongs to), with the date and the number of sign-ups from it that day;
• a salted hash of the wider network your address belongs to (for IPv4, the /24 network; for IPv6, the /48 network), with the date and the number of sign-ups from it that day;
• one count of all sign-ups that day, across the whole site, with no address at all.

The salt is a secret that stays on our server. Without it, a hash cannot be linked to an address. Each hash is kept only for the day it counts, and then deleted. None of these counts are copied into our backups. We keep these counts in our legitimate interest in preventing abuse of the waitlist.

Logs

Our web server keeps access logs, with IP addresses, the pages asked for and the browser type, for up to 14 days to deal with abuse and faults. The waitlist service writes errors to its own log on the server, for up to 14 days. These entries do not include email addresses.

We keep logs in our legitimate interest in keeping the site running and secure.

Who else processes data

OVHcloud hosts our server in a data centre in France. The waitlist, its backups and the logs are kept there.

Purelymail provides the mailbox for contact@viopo.co.uk. If you email us, for example to join the waitlist, to withdraw or with a question, your message and your address are held by Purelymail. Purelymail runs on Amazon Web Services and does not publish the country where it stores mail, so it may be outside the UK, for example in the United States.

Nobody else processes the data described here.

We do not sell personal data, and we do not share it with anyone else unless the law requires it.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct it or delete it, ask us to restrict how we use it, object to how we use it, and ask for it in a portable form. You can also withdraw your consent to the waitlist at any time. Email contact@viopo.co.uk. If you are not happy with our answer you can complain to the Information Commissioner's Office.

Changes

If we change this notice we will update the date at the bottom of this page. We will not use your address for anything other than the launch email without asking you first.