LAST UPDATED 16 OCT 2026

Privacy notice

This notice explains how PerpBrain (“we”) handles your personal data when you join the waitlist at perpbrain.com. It is written to meet the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

Who we are

The data controller is PerpBrain, operated by its founder. Contact: privacy@perpbrain.com.

What we collect

• Your email address.
• The time you gave consent and the time you confirmed it.
• The page or link you signed up from (“source”).
• A one-way, salted hash of your IP address, used only to block abuse. We do not store the IP address itself.

Why, and our lawful basis

We use your email to confirm your sign-up and to tell you when PerpBrain opens access, and occasionally about product updates. The lawful basis is your consent (UK GDPR Art. 6(1)(a); PDPL Art. 4), which we confirm by double opt-in, as PECR requires for electronic marketing. The IP hash is processed under our legitimate interest in preventing spam and abuse.

Who processes it

• Cloudflare, Inc. (hosting and the sign-up endpoint).
• Supabase, Inc. (database).
• Resend, Inc. (sending the confirmation and update emails).

These processors may handle data outside the UK and UAE, including in the United States. Where they do, we rely on the UK International Data Transfer Addendum / Standard Contractual Clauses and appropriate safeguards under PDPL Art. 22–23.

How long we keep it

Unconfirmed sign-ups are deleted after 30 days. Confirmed sign-ups are kept until you unsubscribe or ask us to delete them, or for 24 months after our last email to you, whichever comes first.

Your rights

You can ask to access, correct, delete or export your data, object to or restrict its processing, and withdraw consent at any time. Every email has a one-click unsubscribe. Email privacy@perpbrain.com and we will reply within one month. You can complain to the UK Information Commissioner’s Office (ico.org.uk) or, in the UAE, to the UAE Data Office.

Cookies and tracking

This page sets no cookies and uses no third-party analytics or advertising trackers.

Changes

If we change this notice, we will update the date above. If a change is material, we will tell confirmed subscribers by email.