Privacy policy — Stayput
Stayput provides the product described on this site. Stayput is a product of Grain64. The publisher and data controller is Grain64 SAS (being incorporated), a French société par actions simplifiée in formation; its registration details (Trade and Companies Register number, share capital and registered office) will be published here once it is registered — operating this product under the Grain64 name. This policy is written to Regulation (EU) 2016/679 (GDPR) and the French Loi Informatique et Libertés.
Who is the data controller
Grain64 (contact: [email protected], or the contact form on this site).
What we collect
- An email address, only when you type it into a form yourself
- Basic anonymous usage counts (page views), with no cross-site tracking
- A business contact address that you published on a public page, with the context described under "Business contacts reached by email"
We collect nothing else about you. We do not buy, enrich, or infer data about you, and we do not use your data to train AI models.
Purposes, legal bases, retention
| Purpose | Data | Legal basis (GDPR art. 6) | Kept for |
|---|---|---|---|
| Provide the product and answer you | What you submit | Contract (6.1.b) | While your account or request is live |
| Waitlist / launch notices you asked for | Email address | Consent (6.1.a), withdrawable any time | Until you unsubscribe, at most 2 years after last contact |
| Billing and accounting, once purchases open | Invoicing data | Legal obligation (6.1.c) | 10 years (French commercial code) |
| Keeping the service secure | Technical logs | Legitimate interest (6.1.f) | ≤ 13 months |
| Writing to people who published a business contact address for a related project (see below) | Public handle or project name, the address, the URL where it was found, a note on why we wrote | Legitimate interest (6.1.f) | 90 days after the last contact if you do not reply; while a conversation is live, then 12 months; a bare suppression entry after a "stop" |
Where it lives, and who touches it
Hosting/CDN: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA — +1 888 993 5273 (hosting/CDN). Transactional email: Resend, Inc. (USA). Internal administration: Anthropic, PBC (USA), whose tools the publisher uses to view account and waitlist records. Payments, once open: Stripe. Where a product's core feature processes your content through third-party AI model providers, the product page names them and the content is sent only to deliver that feature. Where the product works offline, that data stays on your device unless you export it. We sell data to no one. Transfers outside the EU/EEA rest on adequacy decisions or the EU Standard Contractual Clauses (GDPR art. 46).
Business contacts reached by email
If you published a business contact address on a public page (a project website, a repository README or a public profile) for a project that relates to what Stayput (this product) does, we may write to you about it. What we hold: your public handle or project name, that address, the URL of the public page where we found it, and a note on why we contacted you. Legal basis: legitimate interest, GDPR art. 6(1)(f), in offering a relevant product to people working on related projects. Every message points to this policy. Addresses come from public pages of these kinds: a project website, a repository README or a public profile; we keep the exact page for each contact and give it to anyone who asks. We write at most twice. We keep this record for 90 days after the last contact if you do not reply. Reply "stop" to any message and we will not write again; we keep only a suppression entry so that this stays true. To access, correct or delete your data write to [email protected].
Cookies and measurement
Only what is strictly necessary for the site to work — no advertising trackers, no analytics cookies. We measure page traffic with Cloudflare Web Analytics, which is cookie-less and stores no identifier on your device. Anything beyond that would require your consent first, and an amendment to this policy before it ships.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — plus, under French law, directives on what happens to your data after death. Write to [email protected]; we answer within one month. You may complain to the CNIL (www.cnil.fr) or the supervisory authority where you live.
Changes
Material changes are noted on this page with a date. This policy covers the portfolio's standard stack; a product that adds a processor or practice gets a Board-approved amendment before shipping it.