Privacy Policy
This Privacy Policy explains how TurnKit ("we", "us", "our") collects, uses, and protects personal information when you visit our website, join our waitlist, or otherwise interact with us.
We're based in Ontario, Canada. This policy is written to comply with Canadian privacy law (PIPEDA) and Canada's Anti-Spam Legislation (CASL), and to provide the rights expected by visitors in the European Economic Area / United Kingdom (GDPR/UK GDPR) and California (CCPA/CPRA).
1. Who we are
TurnKit ("we", "us", "our") is an early-stage startup operated from Ontario, Canada, currently in pre-launch.
For privacy questions or to exercise any of the rights listed below, contact us at hello@turnkit.app.
2. Information we collect
Information you give us directly:
- Email address when you join the waitlist or contact us.
- Anything else you send us voluntarily (e.g., feedback or messages to hello@turnkit.app).
Information collected automatically when you visit:
- Standard technical data — IP address, browser type, device type, referring URL, pages visited, and timestamps — through server logs.
- Aggregate page-view counts through Vercel Web Analytics, provided by our hosting platform Vercel. It is cookieless, sets no persistent identifiers, and hashes visitor IP addresses daily — we receive only aggregated traffic data, not individual visitor profiles.
- We do not use Google Analytics, advertising trackers, retargeting pixels, behavioural profiling, or data brokers.
Cookies. Our site sets only essential cookies required to operate. We do not currently use analytics cookies, advertising cookies, or any other non-essential tracking technologies. (Vercel Web Analytics, described above, is cookieless and therefore does not change this.) We will update this policy if that ever changes.
3. Why we collect it (legal bases)
- To communicate with you about TurnKit — launch updates, product announcements, and eventually the service itself. Legal basis: your consent (CASL express consent; GDPR Article 6(1)(a)).
- To operate, secure, and improve our website. Legal basis: legitimate interests (GDPR Article 6(1)(f)); implied consent under PIPEDA for ordinary site operation.
- To respond to inquiries sent to hello@turnkit.app. Legal basis: legitimate interests / contractual necessity.
- To comply with legal obligations where applicable. Legal basis: legal obligation (GDPR Article 6(1)(c)).
4. How we share it
We share personal information only with:
- Service providers that help us operate the site and communicate with you. These currently include:
- Hosting and aggregate web analytics: Vercel Inc. (United States)
- Database: Supabase (United States)
- Email delivery: Resend (United States)
- Operational tools as needed (we'll add them here when added)
- Legal authorities where required (e.g., subpoena, court order, lawful request).
- A successor entity if TurnKit is acquired or merged. We'll notify you if that happens.
We do not sell your personal information. We do not share it for cross-context behavioural advertising.
5. International data transfers
Some service providers are based outside Canada, primarily in the United States. When personal information is transferred internationally, we rely on appropriate safeguards (standard contractual clauses or equivalent), and we choose providers with strong data-protection commitments.
If you're in the European Economic Area or the United Kingdom, this means your data may be processed in countries the EU has not deemed to provide an adequate level of data protection. By submitting your information, you consent to this transfer.
6. How long we keep it
- Waitlist email addresses: retained until you ask us to delete them, you unsubscribe, or we close the waitlist program.
- Server logs: typically retained for 90 days, then deleted or anonymized.
- Inquiry correspondence: retained as long as necessary to handle the inquiry and for a reasonable follow-up period, then deleted.
7. Your rights
Depending on where you live, you have some or all of these rights:
- Access — ask what personal information we hold about you.
- Correction — ask us to fix inaccurate information.
- Deletion — ask us to delete your data ("right to be forgotten" under GDPR; "right to delete" under CCPA; "withdrawal of consent" under PIPEDA).
- Objection / restriction — object to certain processing or ask us to limit it.
- Data portability — receive a copy of your information in a machine-readable format.
- Withdraw consent — opt out of marketing emails any time via the unsubscribe link in our emails or by emailing hello@turnkit.app.
- Lodge a complaint with:
- The Office of the Privacy Commissioner of Canada (priv.gc.ca)
- Your local supervisory authority in the EU/UK
- The California Privacy Protection Agency (cppa.ca.gov)
To exercise any of these rights, email hello@turnkit.app. We'll respond within 30 days.
We do not discriminate against you for exercising any of these rights.
8. Email and CASL
By submitting your email address through the waitlist, you give us express consent under Canada's Anti-Spam Legislation to send you commercial electronic messages about TurnKit. Each message we send will:
- Clearly identify TurnKit as the sender
- Include a valid contact method
- Include a working, easy unsubscribe mechanism
You may withdraw consent at any time using the unsubscribe link in any email or by emailing hello@turnkit.app. We'll honour the request within 10 business days as required by CASL.
9. Children
The site and service are not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact hello@turnkit.app and we'll delete it.
10. Security
We use reasonable administrative, technical, and physical measures to protect personal information — including HTTPS encryption in transit and access controls on stored data. No system is perfectly secure; we cannot guarantee absolute security, but we will notify you and relevant authorities of any qualifying breach as required by law.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Effective date" at the top reflects the most recent revision. Material changes will be communicated by email and/or a notice on the website.
12. Contact
Questions, concerns, or requests:
TurnKit
Ontario, Canada
hello@turnkit.app