Security & Data Protection

This page describes how we protect personal data collected on this founding member waitlist website. It works together with our Privacy Policy and Terms of Service.

No system is perfectly secure. We apply protections appropriate to a pre-launch waitlist that stores emails and optional survey answers.

1. What this Site stores

• Waitlist email addresses
• Optional survey answers you submit
• Optional referral / campaign parameters from the signup URL, if present

We do not collect payment card numbers on this Site.

2. Application controls

• Server-side writes. Forms post to our API routes. Browsers do not receive database admin keys.
• Secrets in the deployment environment. Production credentials stay off the client and out of public code.
• HTTPS in production. Traffic between users and our hosts is encrypted in transit.
• Database access controls. Waitlist tables use row-level security posture; application access uses a server-held credential.
• Team access. Production access is limited to people who need it to operate the waitlist.

3. Incident response

If we learn of a security incident affecting waitlist personal data, we will investigate, contain, and notify users and regulators when required by applicable North American law.

4. Vulnerability reports

Please report suspected vulnerabilities in good faith. Avoid accessing other users' data, disrupting the Site, or public disclosure before we have a reasonable chance to investigate. Use the contact email below.

5. Your role

• Use an email address you control
• Share invite links carefully

6. Contact

Security: utopiaai@163.com

Privacy / deletion: see the Privacy Policy.