This Privacy Policy describes how Sandstone Cloud, LLC ("Sandstone Cloud," "we," "us," or "our"), a company based in San Francisco, California, collects, uses, and shares information in connection with the KAPEX website at getkapex.ai and related services (collectively, the "Service").
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information We Collect
Information You Provide
- Email address — provided when you join the waitlist or sign up for beta access
- Signup type — whether you registered as a developer, enterprise, or general interest
Information Collected Automatically
- IP hash — a one-way SHA-256 hash of your IP address (we do not store raw IP addresses)
- User agent — browser and operating system information sent with your request
- Timestamp — the date and time of your signup or visit
- UTM parameters — campaign tracking parameters (e.g.,
utm_source,utm_medium,utm_campaign) included in referral URLs
2. How We Use Your Information
We use the information we collect to:
- Communicate with you about KAPEX availability, beta access, and product updates
- Manage waitlist priority and beta invitation queues
- Understand how users discover KAPEX (via UTM parameters) to improve our outreach
- Detect and prevent abuse or fraudulent signups (via IP hash and user agent)
- Comply with legal obligations
3. Data Sharing
We do not sell your personal information. We do not share your data with third parties for their marketing purposes.
We may share information only in the following limited circumstances:
- Infrastructure providers — your data is stored in AWS DynamoDB in the
us-east-1(N. Virginia) region. Amazon Web Services acts as our data processor and is bound by their Data Privacy policies. - Legal requirements — we may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business transfers — if Sandstone Cloud is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Storage and Security
Your data is stored in AWS DynamoDB in the us-east-1 region.
We use encryption at rest (AWS-managed keys) and encryption in transit (TLS 1.2+) to protect
your information. Access to production data is restricted to authorized personnel only.
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy, unless a longer retention period is required by law.
5. Your Rights
All Users
You may request deletion of your data at any time by emailing support@sandstonecloud.com. We will process your request within 30 days.
California Residents (CCPA)
If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to:
- Know what personal information we collect, use, and disclose
- Delete your personal information, subject to certain exceptions
- Opt out of the sale of personal information — we do not sell personal information
- Non-discrimination — we will not discriminate against you for exercising your CCPA rights
To exercise your rights, email support@sandstonecloud.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days.
European Economic Area Residents (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate personal data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Restriction — request that we limit processing of your personal data
- Portability — receive your personal data in a structured, machine-readable format
- Object — object to our processing of your personal data
Our legal basis for processing your data is legitimate interest (communicating about a service you signed up for) and consent (provided at the time of signup). You may withdraw consent at any time by emailing support@sandstonecloud.com.
You also have the right to lodge a complaint with your local data protection authority.
6. Cookies and Tracking
The KAPEX waitlist landing page does not use cookies. We do not use third-party analytics, advertising pixels, or tracking scripts. UTM parameters are captured from the URL at signup time and stored server-side; no client-side tracking is performed.
7. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at support@sandstonecloud.com and we will promptly delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the address associated with your account) or by posting a notice on the Service prior to the change becoming effective. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Sandstone Cloud, LLC
San Francisco, California
support@sandstonecloud.com