Legal

Privacy Policy

Last updated 4 June 2026

Who we are

Shubo is a product of A40 Labs, Inc., a Delaware corporation with its principal office at 10 Fitzroy House, Longfield Avenue, London W5 2JG, United Kingdom (“Shubo”, “we”, “us”, “our”). A40 Labs is the data controller for the personal data described below.

This is the privacy policy for shubo.ai, the pre-launch website for the Shubo product. We take your privacy seriously and handle your personal data in line with the GDPR (EU and UK). This policy explains the small amount of data we collect and what we do with it.

What we collect

shubo.ai is a simple pre-launch site. We only collect:

  • Your email address, your role, and your institution — the three fields of the waitlist form. If you pick “Other” as your role, the short description you type instead. That is all the personal data you actively give us.
  • Basic technical data — such as your IP address and browser type, which our hosting provider records in standard server logs to keep the site secure and running.
  • Anonymous usage statistics — we use Cloudflare Web Analytics, which is cookieless and does not build a profile of you or track you across other websites.

We do not run advertising, we do not sell your data, and we do not use tracking or advertising cookies.

Why we use it

  • We use your email only to contact you about Shubo’s launch and early access. Our legal basis is your consent — you gave us your email to join the waitlist, and you can withdraw it at any time.
  • We use your role and institution to decide who to invite next: access opens in small groups, and these tell us which group someone is in. They are not used to advertise to you, and they are not combined with anything from anywhere else. Our legal basis is the same consent, given by the same form.
  • We use technical data and anonymous analytics to keep the site secure and understand, in aggregate, how it is used. Our legal basis is our legitimate interest in operating and improving the site.

Who we share it with

We use a small number of service providers (“processors”) to run the site:

  • Cloudflare — website hosting, cookieless analytics, secure storage of the waitlist, and delivery of the confirmation email.
  • Slack — when someone joins the waitlist, the entry is posted to a private channel of ours so a person sees it. Nobody outside our team can read that channel.

These providers process data on our behalf under appropriate data-protection terms. We do not share your data with anyone else, and we never sell it.

Cookies and local storage

We do not use tracking or advertising cookies. If you choose a light or dark theme, we save that single preference in your browser’s local storage (on your device) so the site remembers it — a functional setting, not tracking.

How long we keep it

We keep your waitlist email until we launch and invite you, or until you ask us to remove it — whichever comes first. After that, we delete it.

Your rights

Under the UK and EU GDPR you can ask us to access, correct, or delete the personal data we hold about you, or to stop using it. To exercise any of these rights — or to be removed from the waitlist — email us at hello@a40.ai. You also have the right to complain to your local data protection authority.

Contact

For any privacy question, or to be removed from the waitlist, email us at hello@a40.ai.