Who is responsible
Thunderstack AI is operated by Ashish Dhiman, an individual based in Belgium. Ashish Dhiman is the data controller for information handled through this website.
This notice covers thunderstackai.com, including its waitlist and project-request forms. Up Lift has a separate app privacy policy.
What the website collects
Waitlist
When you join the Up Lift waitlist, the website stores:
- your email address;
- the exact consent wording and version shown when you joined; and
- the server date and time of your submission.
Project requests
When you send a project request, the website stores:
- your email address and optional name;
- the request type, message and any selected topics;
- the privacy-notice version shown for the form; and
- the server date and time of your submission and latest manual contact.
Technical information
Your IP address is used briefly in memory to limit abusive form submissions. The application does not write IP addresses to its database or logs. Cloudflare and Hetzner may process network information, including IP addresses, to deliver and secure the site under their own service policies.
The site stores your animation preference in your browser. This local preference is not sent to Thunderstack AI. There are no analytics, advertising cookies, advertising trackers or advertising profiles.
Why the information is used
Waitlist information is used only to send the one planned manual email when Up Lift is ready to install. It is processed with your consent. This is not a newsletter.
Project-request information is used to read, group, assess and respond to requests. This is based on the legitimate interest in understanding voluntary enquiries and deciding what to build.
Transient network information is used to keep the forms and service secure. This is based on the legitimate interest in preventing abuse.
Submitting a form does not trigger an automatic email. Thunderstack AI does not sell personal information, use it for advertising or share it with data brokers.
Where information is stored and who helps
The website and form database are hosted on a Hetzner server in Germany. Cloudflare provides DNS, traffic proxying and network security.
Cloudflare may process information outside the European Economic Area. Where that happens, Cloudflare is responsible for the transfer safeguards described in its data-processing terms. Thunderstack AI does not give either provider permission to use form content for advertising.
No browser admin exists. Form records are reviewed, exported, updated or deleted only through authenticated Secure Shell access to the server.
How long information is kept
- Waitlist records are kept until the relevant launch outreach is complete or you withdraw, whichever happens first.
- Project-request records are kept for 12 months after the latest submission or manual contact.
- Server backups rotate daily across seven copies. A deleted record may remain in an encrypted or access-controlled server backup for up to seven days before the copy containing it rotates out.
- Provider security logs may have separate short retention periods set by Cloudflare or Hetzner.
How information is protected
Forms use encrypted HTTPS connections. Records are stored in a private database on the server, with access limited to the form service and server administrator. The public website cannot list, read, edit or delete submissions.
No internet service can guarantee absolute security. Thunderstack AI uses proportionate access controls, request limits, software updates and backups for this small service.
Your GDPR rights
Depending on the circumstances, you may ask to access, correct or erase your personal information, restrict or object to its use, or receive information you provided in a portable format.
You may withdraw waitlist consent at any time. Withdrawal does not make earlier processing unlawful. To protect you, identity may be verified through the email address connected to a record before a request is completed.
Contact and complaints
For a privacy request, withdrawal or question, email privacy@thunderstackai.com. For a general enquiry, email support@thunderstackai.com.
You may also complain to the Belgian Data Protection Authority or the data-protection authority where you live or work.
Changes to this notice
This page will be updated when the website or its data practices change. The effective date at the top identifies the current version.