Privacy policy

Scentsay ("we," "us") operates the website at scentsay.app and a mobile application currently in pre-release. This policy explains what information we collect when you visit the site or join the waitlist, why we collect it, and the choices you have.

This policy applies to the marketing site and waitlist signup. When the Scentsay app launches, an updated policy will cover in-app data such as your fragrance collection and wear log. Waitlist members will be notified of any material change before the app's first release.

If you don't agree with this policy, please don't use the site or join the waitlist. We respect your choice and aren't going to play games about it.

Information you give us

When you join the waitlist, we collect:

• Your email address — required, so we can confirm your spot and send beta access when it opens.
• Your collection size bucket (e.g., "6–15") — optional. Helps us prioritize who gets early beta access.
• Your top feature interests (up to three) — optional. Helps us decide what to build first.
• Your locale (en or es) at the time of submission — recorded automatically based on the page you submitted from.

If you write to us at hello@scentsay.app or privacy@scentsay.app, we'll have a record of the email exchange.

Information collected automatically

When you visit the site, our hosting provider and analytics tool log standard request information: IP address, user agent, referrer, page URL, and timestamp. We use this to operate the site, debug issues, and understand how people find us in aggregate.

We do not use tracking pixels, fingerprinting, advertising cookies, or session replay tools.

Cookies and local storage

We don't use any cookies that require a consent banner today. If we ever add a tool that does, we'll show one before it loads.

• Send the confirmation email you receive after joining the waitlist (double opt-in).
• Send occasional updates about the closed beta and launch — never more than a couple of emails a month at most.
• Decide which waitlist members to invite first to closed beta, based on collection size and feature interests.
• Aggregate the qualifying-question answers into anonymous summaries that inform our product roadmap.
• Operate, monitor, and debug the website.
• Respond to your questions or requests.

We do not use your information for advertising, profiling, or any kind of automated decision-making that produces legal or similarly significant effects.

If you're in the European Economic Area or the United Kingdom, our legal basis under GDPR is:

• Consent (Art. 6(1)(a)) — for the email list. You actively opted in by checking the consent box and confirming via the email link. You can withdraw consent at any time using the unsubscribe link or by writing to privacy@scentsay.app.
• Legitimate interests (Art. 6(1)(f)) — for basic site analytics that help us run and improve the site. We use a privacy-friendly tool that doesn't profile individuals; you can object to this processing by writing to us.

We share information with the following processors, all of whom are bound by data-processing agreements:

We will only disclose your information to other parties if we are legally required to do so (e.g., a valid subpoena), or if doing so is necessary to protect our rights, the rights of others, or the security of the service. We will challenge overbroad requests where we can.

We do not sell your personal information, and we do not share it with advertisers, data brokers, or anyone for marketing purposes other than our own.

Our processors are based in the United States. If you access the site from outside the US, your information will be transferred to and stored in the US.

For transfers from the EU/UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant) with our processors. You can request a copy of the relevant clauses by writing to privacy@scentsay.app.

• Waitlist contact records — kept until you unsubscribe or until 24 months after the closed beta launches and you haven't engaged. After that, we delete or anonymize them.
• Email correspondence — kept for up to 24 months after the last reply, then deleted.
• Server access logs — kept for up to 30 days, then rotated and overwritten.
• Aggregated, non-identifying analytics — may be kept indefinitely.

Wherever you are, you have the right to:

• Access — ask us what information we hold about you.
• Rectify — correct anything that's wrong.
• Delete — have your information removed (the unsubscribe link does this for the waitlist; email us to confirm full deletion).
• Export — receive your information in a structured, machine-readable format.
• Object — to processing based on legitimate interests.
• Withdraw consent — at any time, without penalty.

If you're in California, the same rights apply under the CCPA/CPRA, including the right to opt out of any "sale" or "sharing" of personal information. We don't do either, but the right exists regardless.

To exercise any of these rights, write to privacy@scentsay.app from the email address on file. We aim to respond within 30 days. You also have the right to lodge a complaint with your local data protection authority if you're not happy with how we've handled your request.

We protect your information with industry-standard measures: HTTPS for all traffic, encrypted-at-rest storage at our processors, scoped API credentials, and access limited to the people who need it.

If we discover a security incident that affects your personal information, we'll notify you and the relevant authorities within the timeframes the law requires (72 hours under GDPR), with what we know and what you should do.

Scentsay is not directed at children, and we do not knowingly collect personal information from anyone under 16 (or under 13 in the United States, under 14 in some jurisdictions). If you believe a minor has signed up, please write to privacy@scentsay.app and we'll delete the account.

We'll update this policy as the product evolves. The "Last updated" date at the top of the page reflects the most recent change. For material changes — anything that materially expands what we collect or how we use it — we'll email everyone on the waitlist with a summary at least 14 days before the change takes effect, so you have time to unsubscribe if you'd rather.

For questions, requests, or complaints about this policy or about how we handle your data:

• Email: privacy@scentsay.app
• General contact: hello@scentsay.app

We'll get back to you as soon as we can — usually within a few business days, and always within 30 days for formal requests under GDPR or comparable laws.