← Back to Item 7

Privacy notice for the Item 7 waitlist

Version 1, 9 October 2026. Applies to the waitlist form on item7.ai only.

Who we are

Item 7 is a product in development, run from London by its founder. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), the founder is the controller of the data described here. Contact: contact@item7.ai.

What we collect

The form uses Cloudflare Turnstile to tell people from automated scripts: it checks your browser in the background and may ask you to tick a box. Cloudflare, which hosts the site, may set one of its own security cookies when you visit any page and may use it for that check. We set no cookies ourselves, and we do not use analytics or advertising trackers. The page serves its own fonts, so opening it sends nothing to Google or any other outside service.

Why, and on what basis

We use your email address for one purpose: to send you one email when early access opens. We use the companies you follow to understand what people want from the product before it opens. The lawful basis is your consent, which you give by submitting the form. You can withdraw it at any time by writing to the contact address above, and we will delete your details.

Where it is kept, and who processes it

The form is handled by Cloudflare, Inc., which runs the program that receives your sign-up (Cloudflare Workers) and the database that stores it (Cloudflare D1), kept primarily in Western Europe. Cloudflare also serves this page and the domain. It acts as our processor under its Data Processing Addendum. Cloudflare is a US company, so some access from outside the UK may occur; such transfers rely on the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework, as applicable. Like any web host, Cloudflare receives your IP address when your browser sends the form. Our code passes it to Cloudflare's rate limiter (a one-minute counter) and to Cloudflare Turnstile to detect automated abuse; we never store it in the waitlist. Our lawful basis for that is our legitimate interest in keeping the list free of spam. No other company receives your sign-up details. If you write to contact@item7.ai, that mailbox is run for us by Google Workspace. We do not sell, share or rent your details to anyone.

How long we keep it

Until early access opens and you have been told, or for 12 months from your sign-up, whichever is sooner, unless you ask us to delete it earlier. If the product does not launch, we delete the list. Deleted entries also leave Cloudflare's automatic database backups within seven days.

Your rights

You can ask us for a copy of the data we hold about you, ask us to correct or delete it, object to our use of it, or withdraw your consent. Write to the contact address above. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK regulator for data protection.

Changes

If this notice changes, the version number and date at the top change with it. The current version is always the one on this page.