Privacy Policy

This Privacy Policy describes how Sandstone Cloud, LLC ("Sandstone Cloud," "we," "us," or "our") collects, uses, and shares information in connection with the KAPEX website at getkapex.ai and related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

---

1. Information We Collect

Information You Provide

• Email address — provided when you join the waitlist
• What you are building — optional text you type into the waitlist form
• How you signed up — that you joined the waitlist

Information Collected Automatically

• IP hash — a one-way SHA-256 hash of your IP address, stored with your signup (the waitlist table holds no raw IP address)
• User agent — browser and operating system information sent with your request
• Timestamp — the date and time of your signup or visit
• UTM parameters — campaign tracking parameters (e.g., utm_source, utm_medium, utm_campaign) included in referral URLs
• Access logs — the website’s hosting keeps a standard log of each request it serves, which records the IP address the request came from, the page asked for, the referring page, the browser’s user agent and the time

2. How We Use Your Information

We use the information we collect to:

• Communicate with you about KAPEX availability, beta access, and product updates
• Manage waitlist priority and beta invitation queues
• Understand how users discover KAPEX (via UTM parameters) to improve our outreach
• Detect and prevent abuse or fraudulent signups (via IP hash and user agent)
• Comply with legal obligations

3. Data Sharing

We do not sell your personal information. We do not share your data with third parties for their marketing purposes.

We may share information only in the following limited circumstances:

• Infrastructure providers — your data is stored in AWS DynamoDB in the us-east-1 (N. Virginia) region. Amazon Web Services acts as our data processor and is bound by their Data Privacy policies.
• Legal requirements — we may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers — if Sandstone Cloud is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Storage and Security

Your data is stored in AWS DynamoDB in the us-east-1 region. We use encryption at rest and encryption in transit (TLS 1.2+) to protect your information. Access to production data is restricted to authorized personnel only.

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy, unless a longer retention period is required by law.

5. Your Rights

The waitlist. If you joined the waitlist and want off it, email support@sandstonecloud.com and we will delete your address rather than mark it hidden. The row is removed; what remains is a one-way hash of the address, the date and the reason, kept so that we can show the deletion happened. Anyone who already knows your address can match it to that hash. Nothing you wrote in the optional “what are you building” box is retained.

All Users

You may request deletion of your data at any time by emailing support@sandstonecloud.com. We will process your request within 30 days.

California Residents (CCPA)

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to:

• Know what personal information we collect, use, and disclose
• Delete your personal information, subject to certain exceptions
• Opt out of the sale of personal information — we do not sell personal information
• Non-discrimination — we will not discriminate against you for exercising your CCPA rights

To exercise your rights, email support@sandstonecloud.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

European Economic Area Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate personal data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request that we limit processing of your personal data
• Portability — receive your personal data in a structured, machine-readable format
• Object — object to our processing of your personal data

Our legal basis for processing your data is legitimate interest (communicating about a service you signed up for) and consent (provided at the time of signup). You may withdraw consent at any time by emailing support@sandstonecloud.com.

You also have the right to lodge a complaint with your local data protection authority.

6. Cookies and Tracking

The KAPEX waitlist landing page does not use cookies. We do not use third-party analytics, advertising pixels, or tracking scripts. UTM parameters are captured from the URL at signup time and stored server-side; no client-side tracking is performed. Requests to the website are recorded in its access logs, as described in section 1.

7. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at support@sandstonecloud.com and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the address associated with your account) or by posting a notice on the Service prior to the change becoming effective. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Sandstone Cloud, LLC
support@sandstonecloud.com