What we collect, and why.
Afterfact builds provenance infrastructure. We hold the same standard to our own handling of your data: collect only what we need, say plainly what we do with it, and keep it no longer than necessary. This notice explains how personal data submitted through afterfact.io is processed.
[ LAST UPDATED · 25 May 2026 ]
Who is responsible
The data controller is Afterfact SASU, a société par actions simplifiée registered in Paris, France. Its registered office address is available on request. For any question about this notice or your personal data, contact [ email ].
What we collect
When you request access to the Receipt beta, we collect the information you submit through the waitlist form:
- Name and email address (required).
- Organisation, role, tools you use, and your intended use of Receipt (optional).
When the form is submitted, our server also records technical metadata automatically: your IP address, your browser's user-agent string, and a timestamp. This is used to prevent abuse and to give each submission a verifiable record.
Name and email are required to join the waitlist; the remaining fields are optional, and providing them is entirely up to you.
Why we use it, and our legal basis
We process your data for two purposes, each with its own legal basis under the EU General Data Protection Regulation (GDPR):
- to contact you about beta access and to understand who wants Receipt and for what — on the basis of your consent, given when you submit the form;
- to keep a verifiable record of each submission and protect the waitlist from spam and abuse (the IP address and user-agent above) — on the basis of our legitimate interest in securing the service.
You can withdraw your consent at any time by emailing us; this does not affect any processing we carried out before you withdrew it.
We do not sell your data, we do not use it for third-party advertising, and we do not make automated decisions that produce legal effects about you.
Where it is stored, and who can access it
The site and its form endpoint run on Cloudflare, which hosts afterfact.io and stores waitlist submissions. Cloudflare acts as our processor and may handle data on infrastructure inside and outside the European Economic Area. Where data is transferred outside the EEA, it is protected by the European Commission's Standard Contractual Clauses; you can request a copy by emailing us. Access within Afterfact is limited to the people who operate the beta.
Cookies and tracking
This site sets no cookies and runs no analytics or third-party trackers. All assets, including fonts, are served from afterfact.io, so loading the site makes no requests to third parties. We do not profile visitors.
How long we keep it
We retain waitlist submissions for the duration of the Receipt beta programme. If you ask us to delete your data, or once the data is no longer needed, we remove it.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to its processing. To exercise any of these, email [ email ]. You also have the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Changes to this notice
If we change how we handle personal data, we will update this page and revise the date above.