AIFACECRAFT is not open yet. Until it is, the only thing the site does is take an email address so we can tell you when it opens. This notice describes exactly what that form collects, why, who else sees it, and how long it is kept. It sits alongside our Privacy Policy; where the two differ for waitlist data, this notice is the one that applies.

The controller is XUSLABS LTD (company no. 16706799), registered with the UK Information Commissioner's Office under reference ZB986561.

What the form collects

When you submit the form we store one row containing:

• Your email address — both as you typed it and a second, normalised copy with the spaces trimmed and the letters lower-cased. The normalised one is what stops the same address being added twice.
• A hash of your IP address, not the address itself. It is salted with a secret that exists only in our hosting environment, hashed with SHA-256, and truncated. We never store or log the address itself and we do not try to work backwards from the hash — but we do not claim it is anonymous: it is pseudonymised, it remains your personal data, and every right described below covers it. If the salt is absent, nothing is stored at all.
• Your browser's user-agent string.
• Where you came from — the referring page, the path you landed on, and any campaign parameters carried in the link.
• The consent wording that was on screen beside the button when you pressed it, and its version number.
• The time you signed up and a sequential seat number.
• Whether we have invited you in yet, whether the invitation has been sent, whether you have left the list, and whether the row is left out of the seat count — four dates, each empty until the thing it records happens. Leaving the list is what starts the deletion clock further down; the last is for registrations we made ourselves while testing, so a seat we took is not counted against the ones still open.
• Any starting credits we owe you — a number, set only for people we invite in the first group, and cleared once it has been paid into your account. It is empty for everyone else.

That is the complete list. No name, no password, no account, no payment details, and no photograph: sign-up, image upload, generation, credits, and checkout are switched off and unreachable while you are waiting, so there is nothing else for the site to collect from you. That holds until we invite you in — from the moment you step inside you are using the product, and what it collects is governed by the Privacy Policy rather than by this notice.

Why, and on what lawful basis

• To email you when we launch — your consent, given by submitting the form under the notice next to the button. You can withdraw it at any time, and withdrawing it does not affect anything we did before you withdrew.
• To keep the form from being flooded — our legitimate interest in a working sign-up form. This is what the IP hash and user-agent are for; neither is used to build a profile of you.
• To know which announcement brought people — our legitimate interest in understanding our own launch. This is what the referrer, landing path, and campaign parameters are for.

We do not sell this data, do not share it for advertising, do not use it to build advertising profiles, and do not use it to train any AI model.

Who else handles it

Four providers are involved, all under written data processing terms. The full matrix, with regions and transfer safeguards, is on our Sub-processors page.

• Vercel — hosts the site and runs the code that receives the form. Since 3 October 2026 that code runs in Tokyo, Japan, next to our database; your request reaches it through whichever Vercel edge location is nearest to you. Vercel is a US company.
• Supabase — stores the row. The database is in Tokyo, Japan.
• Upstash — rate limiting, so one machine cannot submit the form thousands of times. Belgium.
• Google Workspace — delivers one notification of your signup to our own internal mailbox, and delivers the launch email to you.

This means your email address leaves the UK. It is processed and stored in Japan, and handled by providers based in the United States (Vercel, Upstash and Google). Each of those providers is under a contract carrying the safeguards UK data protection law requires for sending personal data abroad — the specific mechanism for each one is named on the Sub-processors page.

How long it is kept

These are not intentions; they are a scheduled job that runs every day inside the database and deletes what is past its date.

• The IP hash is erased 90 days after signup. The rest of the row stays.
• If you unsubscribe, the whole row is deleted 30 days later. The 30 days exist so that we can still recognise and honour your opt-out during that window.
• Every row is deleted 18 months after signup, whether or not you ever did anything.
• Every record is deleted on 22 March 2027, regardless of any of the above. A waitlist for a launch cannot outlive the launch.

Leaving the list

Every email we send carries an unsubscribe link. Opening it takes you to a page with a single button; nothing changes until you press it, so a link scanner or a preview pane cannot remove you by accident.

You can also email support@aifacecraft.com and ask, from the address you signed up with.

Unsubscribing and deletion are different things. Unsubscribing stops the email and starts the 30-day clock described above; if you want the row gone sooner, say so and we will delete it.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to the processing based on legitimate interests, ask for it in a portable form, or withdraw your consent. Because we hold so little, most of these take us minutes rather than the statutory month.

Email legal@aifacecraft.com from the address you signed up with. If you are not satisfied with how we handle it, you can complain to the UK Information Commissioner's Office at ico.org.uk.

When the studio opens

Joining the waitlist does not create an account. If we invite you into an early circle, we create one for you at that point so your seat and starting credits are ready when you arrive — the invitation email is what tells you we have, and it is the only thing that opens it. Everyone else hears from us once, when we launch; signing up then is a separate act. Either way the Privacy Policy takes over from the moment there is an account, and your waitlist row is still deleted on the schedule above.

Contact

Waitlist: support@aifacecraft.com
Privacy and data rights: legal@aifacecraft.com
XUSLABS LTD (no. 16706799), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom