Privacy notice
Privacy draft
DRAFT — OWNER AND EXTERNAL LEGAL APPROVAL REQUIRED. Not effective and not ready for public reliance.
Last draft update: 2026-10-03
Current private-preview behavior
The static build alone does not accept contact or trial submissions. A configured private runtime can send the visible form fields through a same-origin server adapter to the canonical intake service; public collection remains owner and external-legal gated. No third-party analytics provider is loaded. If recognized campaign parameters appear in the page URL, the preview stores only utm_source, utm_medium, utm_campaign, utm_content, and utm_term in browser session storage. That campaign context is not included in the intake request or otherwise transmitted by this site.
Proposed information collection
If the secure intake is activated, Untapped may collect the information a requester submits, such as name, work email, company, service categories, service area, and request details. The approved notice must identify the operating legal entity, contact address, required versus optional fields, lawful purposes, and any jurisdiction-specific rights before collection begins.
Proposed uses
Submitted information is intended to support a requested response, assess private-preview fit, configure an account when authorized, maintain security and reliability, and keep required business records. It should not be used for unrelated outreach without the required approval and consent.
Service providers and disclosure
The production notice must name or categorize approved service providers and explain relevant disclosures. Provider activation remains disabled or gated during private preview. Untapped should not sell submitted personal information.
Retention and deletion
The retention schedule, deletion process, backup treatment, and request-verification procedure remain owner and legal decisions. Collection must not be enabled until those decisions are documented and implemented.
Security
The intended intake is server-side, validated, rate-limited, and protected against duplicate or automated submissions. No security measure eliminates all risk; the final notice must accurately describe the controls actually deployed.
Children
The service is intended for businesses and is not designed for children. The final notice requires legal review of any age statement and handling procedure.
Contact and rights
An owner-approved privacy contact, legal entity, mailing address, applicable request rights, appeal path, and response process must be inserted and verified before publication. No placeholder contact is presented as operational.
Approval checklist
- Owner identifies the operating legal entity and privacy/support contacts.
- External counsel approves collection purpose, rights, retention, and jurisdiction language.
- Engineering verifies the deployed intake, provider list, consent records, deletion path, and analytics behavior match this notice.
- Warden approves the final page before payment, public indexing, or launch.