Custodian Labs Privacy Policy

Last updated: 14 May 2026

This policy explains what data we collect when you sign up to our waitlist at custodianlabs.io, why we collect it, and what you can do about it. We've written it in plain language because we think you should be able to read it.

Who we are

CustodianAI Limited (trading as Custodian Labs) is a New Zealand company building privacy-preserving data transformation infrastructure for AI systems.

What data we collect

When you submit our waitlist form, we collect:

• Your first and last name
• Your email address
• The date and time you signed up
• A record of the consent you gave at signup

We don't use analytics cookies or third-party trackers on this site, so we don't collect anything else when you visit.

Why we collect it

We collect this information for two purposes:

To notify you when early access opens. Your name and email let us send you a single email when Custodian Labs launches API access. The signup category helps us understand who's interested in the product and prioritise our communications accordingly.

To demonstrate that you consented. We keep a record of when you signed up and what you agreed to, so we can show we handled your data properly if anyone asks.

The lawful basis for both purposes is your consent, which you give by ticking the boxes on the signup form. You can withdraw that consent at any time (see "Your rights" below).

Who handles your data

Your data is collected and stored by Webflow, Inc., the platform we use to host this website and process form submissions. Webflow is a US-based company, and your data is transferred to and stored on their servers. Webflow operates under the EU-US Data Privacy Framework, which is the legal mechanism that permits this transfer for EU residents. You can read Webflow's privacy policy and their data processing addendum for more detail on their practices.

We do not share your data with any other third parties.

How long we keep it

We keep your data until 12 months after Custodian Labs publicly launches early access, or until you ask us to delete it — whichever comes first. After that, the operational purpose for holding the data has passed, and we'll delete it.

If you ask us to delete your data earlier, we'll do so within 30 days.

Your rights

If you're in the EU, UK, or another jurisdiction with similar privacy laws, you have the following rights regarding your data:

• Access. You can ask us for a copy of the data we hold about you.
• Rectification. You can ask us to correct anything that's wrong.
• Erasure. You can ask us to delete your data.
• Portability. You can ask us to give you your data in a structured format you can take elsewhere.
• Objection. You can object to us processing your data for marketing purposes (in practice, this is the same as unsubscribing).
• Withdrawal of consent. You can withdraw your consent at any time, which will stop us from processing your data going forward.

To exercise any of these rights, email us at the address listed at the bottom of the page. We'll respond within 30 days.

New Zealand residents have similar rights under the Privacy Act 2020 and can exercise them the same way.

How to complain

If you think we've handled your data poorly and you're not satisfied with our response, you can complain to a privacy regulator:

• In the EU: your country's data protection authority. A list is available at edpb.europa.eu.
• In the UK: the Information Commissioner's Office at ico.org.uk.
• In New Zealand: the Office of the Privacy Commissioner at privacy.org.nz.

Security

We use Webflow's built-in security measures to protect your data, including encryption in transit and at rest. Access to the form submissions is limited to authorised people at Custodian Labs.

In the unlikely event of a data breach, we'll notify the relevant authorities within 72 hours and contact you directly if there's a meaningful risk to you.

Children

This service is not intended for anyone under 16. We don't knowingly collect data from children. If you believe a child has submitted data through our form, please email us and we'll delete it.

Changes to this policy

If we change this policy in a way that affects how we handle your data, we'll email everyone on the waitlist before the changes take effect. Minor clarifications or formatting changes will be made without notice, but the effective date at the top will always tell you when the policy was last updated.

Contact

For any questions, requests, or concerns about your data:

Email: sherry@custodianlabs.io