Collect only what the invitation needs.

Controller and scope

Jaakko Heusala is the data controller for the waiting-list records described here. He operates the AittaSocial project and this site. Learn more at thejhh.me ↗. The direct privacy contact is jheusala@iki.fi. This notice covers only this site's waiting lists. It does not cover future Aitta Network participation data or the separate AittaSocial Hub service.

What we receive

When you use Sign in with ChatGPT, the site receives the identity information shown during sign-in, including the authenticated email supplied for your session. It does not receive your ChatGPT conversations, memory, files, API tokens, billing data, or passwords.

What we store

For each waiting list you join, AittaSocial stores your normalized authenticated email address, the list name, the version and time of your consent, and creation and update timestamps. Each list membership is separate.

Purpose and legal basis

We rely on your consent to record each list you deliberately join and contact you with an invitation or relevant next step for that list. Organizer, Participant, Builder, and Investor memberships are independent. We do not use a list join to create an Aitta or network account.

The consent here is narrow. It does not subscribe you to an unrelated newsletter, authorize general advertising, or turn an Investor list membership into a securities offer. A materially broader purpose would require a separate notice and choice.

Who can see it

The list is not public. Access is restricted to signed-in site owners whose authenticated email is in the server-side owner allowlist. The initial site owner is the controller named above. Hosting and database infrastructure necessarily processes the data to provide this feature.

Hosting, processors, and data location

ChatGPT Sites hosting and its D1 database infrastructure process the records and operational logs needed to run this feature. ChatGPT Sites does not support data residency at launch, including for deployed Sites, D1 data, artifacts, and related logs. Do not assume the data remains in Finland or the EEA. Applicable provider terms and transfer safeguards govern that processing.

Read the official ChatGPT Sites hosting and residency information ↗

How long we keep it

We keep a list membership only while that list is being prepared or used for invitations, or until you leave it. We review the continuing need for active lists at least annually. Leaving a list deletes that active membership from D1; operational backups and logs may take additional time to expire under provider practices.

Your choices and rights

You may join any combination of lists, leave them independently, or sign out without changing membership. Withdrawing consent is as simple as leaving the relevant list and does not affect processing that already occurred while your consent was active.

Depending on applicable law, you may also have rights to access, correct, erase, restrict, object to, or receive a copy of your personal data, and to complain to a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

Questions and requests

Contact Jaakko Heusala at jheusala@iki.fi for privacy questions or requests concerning this site's waiting-list data. Do not put personal data into a public GitHub issue. General Hub information remains available through the AittaSocial Hub.