Privacy Policy

Last updated: 6 October 2026

Privacy at a glance

• We are Ilzaro LLC, maker of Chat2Plan, an app in development.
• This policy covers the chat2plan.com website and its waitlist. The app will have its own privacy policy, published before the app is available.
• The website asks you for one thing: your email address, if you join the waitlist.
• We set no cookies, run no analytics and show no ads.
• We do not sell your personal information or share it for cross-context behavioral advertising.
• We use your email address only to confirm it’s yours and to email you once more when you can start using Chat2Plan. An unconfirmed address is deleted from the waitlist after 7 days; a confirmed one is kept until you remove it. Cloudflare, which hosts the site and the waitlist, and Resend, which sends the emails through its own providers, process it for us.

This summary is for convenience; the full policy below controls.

1. Who we are and this policy’s scope

This Privacy Policy explains how Ilzaro LLC (“Ilzaro,” “we,” “us”) handles personal information when you visit chat2plan.com (the “Site”) and when you join the Chat2Plan waitlist. For this information we act as a controller: we decide how and why it is processed.

2. Information we collect

Visiting the Site

• Request data. Cloudflare hosts the Site. To serve and protect it, Cloudflare processes the data every web request carries, such as your IP address, your browser’s User-Agent header, the page requested and the time. We do not keep request logs of our own.
• Your theme choice. If you choose Light or Dark, your browser stores that choice on your device so the next page uses it. It is never sent to us. If you never choose, nothing is stored.

The Chat2Plan waitlist

Before the app is available, you can join a waitlist on the Site. This part describes everything the waitlist keeps and does.

• What we keep. Your email address; the language of the page you signed up on (English or Spanish); whether your address is confirmed; when you signed up, when you confirmed, whether and when you asked for your confirmation a second time, how many times we have tried to send it and when we last tried. Until you confirm, we also keep a one-way hash of the code in each of the two links we email you; after you confirm, only the removal link’s. We also keep a keyed hash of your mailbox: your address with any “+tag” removed, and for Gmail addresses the dots removed and googlemail.com read as gmail.com. We keep no name and nothing else. Giving your email address is voluntary; without it you cannot join the waitlist.
• Where. In a database run by Cloudflare (Cloudflare D1), encrypted at rest. We ask Cloudflare to place it in Eastern North America, which Cloudflare treats as a preference rather than a guarantee.
• Why. Only to confirm that the address is yours, and to email you once more when you can start using Chat2Plan. We do not add it to any other list or use it for anything else. Once you confirm, we rely on your consent, which you can withdraw at any time with the link in every email. Before that, we rely on our legitimate interest in checking that the address is yours (Section 3).
• Confirming. Your address joins the waitlist only after you open the link in our email and press Confirm on the page it opens; opening the link alone changes nothing. An address that is not confirmed is deleted 7 days after it was signed up.
• How many emails. We send one confirmation email. If you sign up again before confirming, we send it once more, and not again for the same signup. When many people sign up at once, or our email provider is unavailable, the confirmation can be delayed. If the provider keeps refusing it, we stop trying after about a day; either way, an unsent signup is deleted 7 days after it was made, like any other unconfirmed one, and you can sign up again.
• One signup a day per mailbox. We accept at most one new signup a day per mailbox, treating addresses that differ only by a “+tag”, by letter case or, for Gmail, by dots or by gmail.com versus googlemail.com as one mailbox. This limits how often the form can be used to email someone else’s inbox. This, and the removal below, is what the mailbox hash is for.
• How long. An unconfirmed address, 7 days. A confirmed address, until you remove it.
• Leaving. Every waitlist email has a link to remove your address, and mail apps that offer a one-click “unsubscribe” use the same link. While your address is on the waitlist, removing it deletes it, together with any other address we treat as the same mailbox (see above). We then keep only the keyed hash of that mailbox and the date of the removal, indefinitely, so that no address of that mailbox is added to the waitlist or emailed by it again. The hash does not contain your address; only someone holding our secret key could check whether a given address matches it. That key is used for nothing else, and we do not replace it. Only if it were exposed or lost would we have to, and then removals made before the change would stop blocking new signups, and a removal after it would no longer reach addresses of the same mailbox added before it. An unconfirmed address that has already been deleted after its 7 days leaves nothing for the link to remove, so the link then blocks nothing. Removing your address does not delete the copy of our email that Resend keeps (below).
• Who else receives it. Resend sends our emails. It receives your address and the email we send you, with its two links, and stores them in the United States, whichever sending region we use, for up to 30 days while our account with Resend is active, plus up to 7 days in its backups; after our account ends, Resend deletes what remains within 90 days. If our email to you bounces permanently, or you mark it as spam and your mail provider reports that to Resend (Gmail, for one, does not), Resend keeps your address on its suppression list, so it sends you nothing more from us, until we remove it from that list. Resend delivers through its own providers, including Amazon Web Services, and a small sample of emails may be checked for trust and safety by a model on dedicated infrastructure that Resend operates at its provider RunPod; Resend states that neither it nor its AI subprocessors, RunPod among them, use customer content to train or fine-tune models. Cloudflare hosts the Site, the database above and the bot check below. Replies to our emails go to privacy@ilzaro.com, hosted by Proton Mail, which receives whatever you choose to write back.
• Your IP address. We do not store your IP address. Cloudflare processes it to serve the site and to run the bot check on the waitlist form, and we use it, hashed, only to limit repeated sign-ups. The hash is keyed with a secret and the date, so it changes every day, and for an IPv6 address it covers your network’s /64 block rather than your exact address. The hash goes only to Cloudflare’s rate limiter, which counts requests per key in one-minute windows; it is never written to our database. The waitlist’s code writes event lines, such as an email being sent, that we can watch live but do not keep; they never contain your email address or your IP address.
• The bot check. Pages with the waitlist form load Cloudflare Turnstile, which checks that a visitor is a person using signals such as the IP address, the browser’s TLS fingerprint and its User-Agent header. It runs for every visitor to such a page, whether or not you submit the form. Cloudflare processes them on our behalf to run the check, and also, as a controller in its own right, to improve Turnstile’s bot detection (Cloudflare’s Turnstile privacy addendum). When you submit, we ask Cloudflare to verify the check’s result and never send it your IP address.

Emails you send us

If you write to us, we receive your email address and whatever you write, and we use it only to answer you and, for a privacy request, to keep a record of how we handled it.

3. Legal bases (for EEA and UK visitors)

Where the GDPR or UK GDPR applies, we rely on:

• Consent for the waitlist: keeping a confirmed address and sending you the one email when you can start using Chat2Plan. You can withdraw it at any time with the link in every waitlist email.
• Legitimate interests for sending the confirmation email and keeping an unconfirmed address for up to 7 days (to check that the person who entered it controls it), serving and securing the Site, running the bot check, limiting repeated signups, keeping the mailbox hash after a removal so we honor it, and answering emails you send us.
• Legal obligation, or where none applies our legitimate interest in showing how we handled it, for keeping a record of privacy requests.

4. Who receives your information

We do not sell your personal information or share it for cross-context behavioral advertising. We disclose it only:

• To service providers that process it on our behalf, under contract: Cloudflare (hosting, the waitlist database and the bot check), Resend (sending the waitlist emails) and Proton Mail (our email). The list, with each provider’s role, data and location, is at chat2plan.com/subprocessors.
• To Cloudflare, as a controller in its own right, for the bot check’s signals only, to improve Turnstile’s bot detection (Section 2, “The bot check”).
• For legal reasons: to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Site.
• In a business transfer: as part of a merger, acquisition, or sale of assets, subject to this policy.

This list is exhaustive. We do not disclose your personal information to anyone else.

5. Cookies and tracking

We set no cookies and use no analytics, advertising or tracking across other websites. The only thing the Site stores in your browser is the theme choice in Section 2, and only if you make one. The bot check on pages with the waitlist form processes the signals in Section 2, which Cloudflare describes as strictly necessary for detecting bots; Cloudflare’s Cookie Policy describes any cookies it uses.

6. Data retention

• Request data is processed by Cloudflare to serve and protect the Site; we keep no request logs of our own.
• Waitlist data as set out in Section 2: an unconfirmed address for 7 days, a confirmed one until you remove it, and after a removal only the keyed hash of its mailbox and the date of the removal, indefinitely. Deleted waitlist data can be restored from our database provider’s point-in-time recovery for up to 30 days. Resend keeps an address that bounced permanently or was reported as spam on its suppression list until we remove it (Section 2).
• Emails you send us for as long as we need them to answer you and to keep a record of any privacy request.

7. Security

The Site is served over encrypted connections (TLS), and the waitlist database is encrypted at rest. The secret keys behind the waitlist’s hashes and links stay on our servers and never reach your browser. No method of transmission or storage is completely secure. If a breach affecting your personal information occurs, we will notify you and the relevant regulators where and when the law requires.

8. International data transfers

We are based in the United States, and the waitlist is stored and processed there and wherever Cloudflare serves the Site. Cloudflare and Resend are certified under the EU-U.S. Data Privacy Framework and its UK extension, and their data processing terms with us include the European Commission’s Standard Contractual Clauses. Ilzaro is not itself certified under the Data Privacy Framework.

9. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you and get a copy, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw your consent.

• To leave the waitlist, use the link in any waitlist email (Section 2, “Leaving”).
• For anything else, write to privacy@ilzaro.com. We will verify your request and respond within the time the law requires (generally 30 to 45 days). We will not discriminate against you for exercising your rights.

EEA and UK visitors may also lodge a complaint with their supervisory authority; a list is maintained by the European Data Protection Board at edpb.europa.eu, and UK visitors can contact the Information Commissioner’s Office at ico.org.uk.

US state privacy rights. If you live in California or another US state with a comprehensive privacy law, you have the rights above, including to know, access, correct and delete. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. In the last 12 months we have collected identifiers (your email address, and your IP address as it passes through) and internet or other electronic network activity information (such as your browser’s User-Agent and the page requested) (Section 2). We disclosed them to the service providers in Section 4 and, for the bot check’s signals only, to Cloudflare as described there.

10. Children’s privacy

The Site and its waitlist are not directed to anyone under 18, the minimum age for Chat2Plan itself, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. Contact privacy@ilzaro.com if you believe a child has joined the waitlist.

11. Changes to this policy

We may update this policy. We will post the new version here with a new “Last updated” date, and where the law requires, we will ask for your consent first.

12. Contact us

Ilzaro LLC Privacy contact: privacy@ilzaro.com Security contact: security@ilzaro.com, see our vulnerability disclosure policy

We have not appointed a Data Protection Officer. Under Article 37 GDPR, one is required only for public authorities, or where core activities involve large-scale regular and systematic monitoring or large-scale processing of special categories or criminal-offence data; none applies to us.

EU and UK representative. We have not appointed a representative in the EU or the UK under Article 27 of the GDPR and the UK GDPR. That duty falls on an organization outside those territories that offers goods or services to people in them, or monitors their behavior there. The Site is run from the United States and is not directed at people in the EU or the UK: it is published in English and in Spanish for the Americas, quotes no prices in euros or pounds, and is not marketed in those territories. It does not monitor visitors’ behavior either (Section 5). If we begin directing the Site or Chat2Plan at people in the EU or the UK, we will appoint representatives and list them here.