Privacy Policy

Who we are

Arnen Labs LLC ("we", "us", "Arnen Labs") is a Wyoming limited liability company and the operator of the Rehnova brand and product. We operate rehnova.io and related subdomains. This policy describes what personal data we collect through the site, why we collect it, and what we do with it.

This policy applies to the marketing site and waitlist today. When the product enters general availability, a separate Product Privacy Policy and Data Processing Addendum will govern customer data; this marketing-site policy will continue to govern visitors and prospects.

What we collect

We keep collection deliberately narrow. Today that means:

• Waitlist form submissions (via our form provider, Tally): your name, work email, company, LinkedIn URL, website, and monthly active users. Any optional fields you fill in.
• Direct correspondence: any email you send to hi@rehnova.io or other Rehnova addresses, including attachments and metadata.
• Server logs: standard HTTP request logs retained by our host (Vercel) for security and abuse prevention. Typically includes IP address, user agent, requested URL, and timestamp. Retained per Vercel's policy.

We do not currently run third-party analytics, advertising trackers, or behavioral cookies on this site. If that changes, we will update this policy and this section before the change takes effect.

How we use it

We use personal data for three purposes:

• Evaluating design-partner fit and deciding which applicants join the cohort.
• Responding to your inquiry — email replies, scheduling intro calls, follow-up messages.
• Operational security — diagnosing outages, blocking abuse, defending against attack traffic.

We do not use your data for automated decision-making that produces legal or similarly significant effects.

Who we share it with

We don't sell personal data. We share it only with:

• Sub-processors we rely on to operate the site. Current list: Tally (waitlist form hosting), Vercel (site hosting and edge network), Google Fonts (web font delivery). Each processes data under its own privacy policy and a data processing agreement with us where applicable.
• Legal requirements — if we are compelled by subpoena, court order, or regulation, and only to the narrow extent required.

If we later add email marketing, analytics, or CRM tooling, we will update the sub-processor list here before onboarding those services.

How long we keep it

• Waitlist submissions: retained while your application is under consideration, plus up to 24 months afterward so we can re-contact you when relevant cohorts open.
• Direct correspondence: retained indefinitely unless you ask us to delete it.
• Server logs: retained per Vercel's default policy (typically under 30 days).

Your rights

Regardless of where you live, you can ask us to:

• Access the personal data we hold about you.
• Correct data that is wrong or out of date.
• Delete your data ("right to be forgotten"). We will honor this unless a legal obligation requires us to retain it.
• Port your data to another service in a machine-readable format.
• Object to or restrict specific processing activities.

Send any of these requests to hi@rehnova.io. We aim to respond within 30 days. If we can't fulfill a request, we'll tell you why.

Cookies

As of the effective date, this site does not set first-party analytics or advertising cookies. Your browser may receive technical cookies from Vercel (anti-abuse), Tally (form state while you fill it out), or Google Fonts (font caching). None of these are used for cross-site tracking by us.

Security

We use HTTPS for all traffic, encrypt data at rest with our sub-processors' default strong encryption (typically AES-256), and limit access to personal data to founders and staff who need it. No system is perfect; if we ever discover a breach affecting your data, we will notify you without undue delay.

International transfers

We are a US company. When you contact us from outside the US, your data is transferred to and processed in the US. Our sub-processors apply standard contractual clauses or equivalent safeguards where required by EU, UK, or other applicable law.

Children

This service is aimed at business customers. We do not knowingly collect data from anyone under 16. If you believe a child has submitted information, contact us and we'll delete it.

Changes to this policy

We will update this page when the scope of data we collect changes, when sub-processors change, or when applicable law requires it. The "Last updated" date above reflects the most recent material change. For material changes, we'll update the date and — where we have your contact details — email you.

Contact us

Questions, requests, complaints: hi@rehnova.io. We read every email.