Pilot privacy policy

1. Information we use

• Account and invitation: your email, account identifier, verification and session records, invitation assignment or redemption, and setup and policy-acceptance dates.
• Preferences: your selected role, preferred topic order, timezone, email and SMS times, and delivery opt-in or opt-out. If you choose SMS, we also process your phone number, verification status, consent record, and message delivery results.
• Service activity: briefing views, pilot allowance used, optional item feedback, delivery attempts and results, and records needed to investigate failures.
• Waitlist: your confirmed email address, the purpose you agreed to, confirmation and withdrawal events, and minimal suppression records used to prevent unwanted messages.
• Security and support: technical request information processed by our hosting and security providers, such as IP address and browser details, abuse-prevention markers, and anything you choose to send to support.

A waitlist request alone does not create an eligible launch contact. Before confirmation, the application uses temporary keyed address fingerprints and email-confirmation capabilities. Our email provider still processes the recipient address to deliver that confirmation.

The pilot does not ask for your calendar, commute, location history or payment card. A phone number is required only if you choose SMS. Data previously provided to an older account, including billing references, can remain until it is removed or no longer needed for that account.

2. Email choices and measurement

Sign-in and confirmation messages help you access the service. Briefing email is optional and can be switched off in Preferences or through its unsubscribe link. A link scanner visiting the unsubscribe page does not opt you out; the confirmation action does. Some inboxes provide a separate one-click unsubscribe action.

Waitlist updates require separate confirmation and have their own withdrawal link. Having an account is not permission for launch marketing, and joining the waitlist does not grant pilot access.

We record delivery results and web reading or feedback needed to operate the pilot. The pilot does not use advertising trackers, session replay, PostHog, or Vercel Web Analytics. Briefing emails do not contain an open-tracking pixel or redirect source links through click tracking. We do not sell personal information or share it for third-party advertising.

3. Service providers and AI

• Supabase: account authentication, database records, and private storage.
• Vercel: hosting, request logs, and abuse prevention, including BotID verification.
• Namecheap Private Email: sign-in, confirmation, and product email delivery.
• Google Gemini: assistance drafting from public source titles and short source excerpts. Pilot members' emails, profile details, and feedback are not included in these drafting prompts.
• Twilio: phone verification, consent-related confirmation messages, and optional SMS briefings. Twilio processes the recipient phone number, message content, and delivery status.
• Stripe: records and management of existing subscriptions. New pilot enrollment does not initiate payment.

These providers process information under their applicable terms and may operate in the United States and other countries. Visiting a publisher's source link takes you to that publisher's website and privacy practices.

4. Cookies and browser storage

We use session cookies for sign-in and short-lived cookies for verification, confirmation, private access, and security checks. Existing display-preference cookies may also be read. These are separate from advertising or cross-site tracking. Clearing cookies may sign you out or interrupt a confirmation.

5. Retention and deletion

We retain the active profile and preferences while your account exists. You can delete the account in Preferences. Deletion removes the active account and profile and stops product delivery; any existing billing cancellation must succeed first. Pilot expiry does not delete your account automatically, and the older inactivity-deletion schedule is paused.

Confirmed waitlist contacts remain until you withdraw or the list is closed. Withdrawal removes you from the eligible launch list; your address and limited consent and suppression records can remain so your choice continues to be honored. Account deletion does not automatically withdraw a separately confirmed waitlist permission.

We retain limited consent, delivery, security, and historical billing evidence where needed to honor opt-outs, investigate abuse or delivery problems, or meet legal obligations. Temporary confirmation markers are cleaned up separately from confirmed contacts. Provider logs, email records, and rotating backups may outlast removal from the active application. Deletion is not a promise of immediate erasure from every backup or provider.

6. Your choices and requests

You can edit preferences, unsubscribe, withdraw waitlist permission, or delete your account. You may also request access, correction, export, or deletion of your personal information by emailing privacy@ciodigest.app from the address associated with it. We may need to verify the request before acting. Additional rights depend on the law that applies to you.

CIO Digest is intended for professionals aged 16 or older. Do not submit children's data or confidential business information in feedback or support messages.

7. Security and changes

We use encrypted connections, restricted account access, and database controls to protect information. No system can guarantee absolute security. We will provide notices of incidents as required by applicable law.

We will update this policy when practices change and give notice of material changes through the service or email. Questions about the pilot can also go to hello@ciodigest.app. The Pilot terms explain access and delivery.