Privacy policy.

Who we are

Lithos is a product of Ascot Software ("Lithos", "we", "us"), the data controller responsible for the personal data described in this policy. We are based in the United States at 22 Ascot Ln, Oakland, CA 94611.

This policy covers the Lithos marketing website and the waitlist form on it. It does not cover the Lithos product itself, which is not yet generally available; a separate agreement and privacy notice will govern that when it launches.

What we collect, and why

Waitlist signups

When you submit the form on our waitlist page, we collect:

• Your name — so we can address you properly.
• Your email address — so we can contact you when a place opens in the next onboarding batch. This is the only thing we use it for.
• Your company name — so we can understand who is asking and size the batches sensibly.
• An optional free-text note about what your agents are doing today. This field is optional and you control exactly what goes in it. Please do not include confidential information, credentials, or personal data about other people.

The form is a Google Form. When you press submit, your answers are sent directly to Google's servers and stored in a Google Sheet that only we can access. Google processes this data on our behalf as a service provider — see who we share it with below.

Joining the waitlist is entirely voluntary. You are not required to give us any of this to browse the site.

What we email you

Joining the waitlist signs you up for exactly one kind of message: an email from us about your access to Lithos. That normally means a single email when a place opens, and occasionally a short note if the timeline changes materially. We do not add you to a newsletter, a drip sequence, or a marketing list, and we do not pass your address to anyone else to email you. Every email we send you will tell you how to be removed, and replying to ask is enough.

Server logs

Like almost every website, the servers that host this site keep standard access logs. These may include your IP address, browser and device type, the pages you requested, and the time you requested them. We use these only to keep the site running and secure. We do not use them to build a profile of you, and we do not combine them with your waitlist entry.

Your theme preference

If you switch the site between light and dark mode, we save that choice in your browser's localStorage under the key lithos-theme, so the site remembers it on your next visit. This is a functional setting, not a tracking mechanism. It never leaves your browser, we cannot read it, and clearing your browser data removes it.

What we do not do

This site sets no cookies. It runs no analytics, no advertising pixels, no session recording, and no third-party tracking scripts. Our fonts are served from this site rather than a font CDN, so loading a page does not announce your visit to anyone else. We do not buy personal data, and we do not enrich what you give us with data from other sources.

Our legal bases (UK and EU visitors)

If the UK GDPR or EU GDPR applies to you, we rely on these legal bases:

• Consent (Article 6(1)(a)) for your waitlist entry and the emails that follow. You gave it by choosing to submit the form, and you can withdraw it at any time by asking us to delete your entry. Withdrawing it does not affect processing we carried out before you did.
• Legitimate interests (Article 6(1)(f)) for server logs, where our interest is keeping the site available, debugging faults, and defending against abuse.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's marketing. We share it only with the service providers that let us run the site, and only so far as they need it:

• Google LLC — Google Forms and Google Sheets receive and store every waitlist submission. See the Google Privacy Policy.
• Our hosting provider — serves the pages of this site and keeps the access logs described above.

We may also disclose personal data if we are legally required to, or where we need to establish or defend legal claims. If Lithos is ever acquired or merged, waitlist data may transfer to the acquiring entity, which would remain bound by this policy until you are told otherwise.

International transfers

We are based in the United States and our service providers store data there. If you are in the UK, the EEA, or another region with data-transfer rules, submitting the form means your data is transferred to the United States. For transfers to Google, we rely on Google's certification under the EU–US and UK–US Data Privacy Framework and on the Standard Contractual Clauses in Google's terms.

How long we keep it

We keep your waitlist entry for as long as the waitlist is open and for a reasonable period after we have contacted you about access — and no longer than we need it for that purpose. If you ask us to delete it, we remove it from the response sheet promptly and, in any case, within 30 days. Server logs are kept only for as long as our hosting provider retains them in the ordinary course.

Your rights (UK and EU)

If the UK or EU GDPR applies to you, you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we process it;
• receive your data in a portable, machine-readable format;
• withdraw your consent at any time.

Email us and we will action it free of charge, normally within 30 days. You never need to give a reason. You also have the right to complain to your data protection authority — in the UK, that is the Information Commissioner's Office — though we would appreciate the chance to put things right first.

Your rights (California)

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we have collected about you and why, to request its deletion, to request that inaccurate information be corrected, and not to be treated differently for exercising any of those rights.

In the twelve months before the date of this policy, the only category of personal information we have collected is identifiers and professional information — the name, email address, company, and optional note you submit to the waitlist — collected directly from you. We have not sold or shared personal information as those terms are defined by the CCPA, and we do not do so now. We do not knowingly collect or sell the personal information of anyone under 16.

How we protect it

Your submission travels to Google over an encrypted connection, and this site is served over HTTPS. The response sheet is restricted to the people at Ascot Software who need to see it, protected by their individual Google accounts. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security — but we keep the amount of data we hold deliberately small, which is the most effective protection we can offer you.

Children

Lithos is a business product. This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, email us and we will delete it.

Changes to this policy

If we change how we handle personal data, we will update this page and move the "last updated" date at the top. If the change is significant and we hold your email address, we will tell you directly rather than relying on you to notice.

Contact us

For any privacy question — access, correction, deletion, or anything else in this policy — email support@lithoscloud.com. To be removed from the waitlist, that is all it takes: one line, no reason needed.