Privacy Policy
JoinAI (joinai.me) is an independent site for solo founders. We do not sell personal data. This site does not run advertising and does not load advertising or analytics cookies.
Who we are
The controller for personal data processed through joinai.me is the JoinAI organizers. There is no registered company name, VAT number, or postal address published. Contact: hi@joinai.me. This site is not an official product of any model lab.
What we collect
- Waitlist emails you submit on the homepage (optional name and message, plus locale).
- Newsletter emails you submit on Resources (/articles).
- Tool, program, and project submissions you send (name, URL, description, and related listing fields). The tool-submit form may include an optional email in the request; the current server does not store that email on the listing.
- Account data if you create a login: email, display name, and a hashed password. Signing in also creates a session that may store IP address and user agent.
- Community content you post after sign-in (threads, replies, project listings, program suggestions) and the public profile fields created from your account (name and handle).
- Vote anti-abuse keys: a short hash of IP address and user agent, stored with the vote and in a short Redis lock (12 hours).
- Desk-chat messages you type in the on-site assistant. Messages are used to answer you. They are not stored in a JoinAI chat table. If a SpaceXAI API key is configured, the last messages are sent to SpaceXAI (xAI) to generate a reply.
- Preference data on your device: language cookie webs_lang; color-mode cookie webs_design if you toggle light/dark; banner choice in localStorage (cookie_consent_v1).
Why we process it
We process this data to run the community (waitlist, newsletter, directory, discussion, projects, programs), to reply to you, to keep the service secure, and to meet legal obligations. Legal bases under GDPR Article 6: consent (Art. 6(1)(a)) for waitlist and newsletter emails and optional preference cookies that are not strictly necessary; contract / steps prior to contract (Art. 6(1)(b)) for accounts, signed-in posts, and directory submissions; legitimate interests (Art. 6(1)(f)) for security, abuse prevention, vote-fraud limits, and community moderation; legal obligation (Art. 6(1)(c)) where a request or law requires it.
Where it is stored
Waitlist, accounts, posts, and listings are stored in PostgreSQL. Short vote locks use Redis. Emails to organizers are sent only through a configured mail sender when a mail API key is present; otherwise the lead is stored and no confirmation email is sent. Object storage is provisioned for this app’s host environment. JoinAI application code does not currently write personal data there. If desk chat uses the SpaceXAI API, those prompts are processed by SpaceXAI as described in their enterprise terms.
Sharing
We do not sell lists. Public community posts, tool listings, projects, and program suggestions are visible to visitors. We share data with processors only as needed to host the site, send organizer mail when configured, or generate a desk-chat reply when a SpaceXAI API key is configured, or if required by law. Model labs do not operate this website and do not receive your waitlist or account data from us unless you contact them yourself.
Retention
Waitlist and newsletter records: until you unsubscribe or ask us to delete them. Accounts and community posts: while the account is active, unless you request erasure (a minimal record may be kept where the law requires it). Vote hashes and Redis locks: lock expires in 12 hours; database vote rows remain for anti-abuse. Desk-chat prompts are not stored by JoinAI. Server access logs are not specified in application source, so this policy does not claim a rotation period.
Your rights (EU / Portugal)
You may request access, correction, erasure, restriction, portability, and objection, and you may withdraw consent at any time, as provided by GDPR Articles 15–21. Email hi@joinai.me with the subject “Privacy request”. You may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at https://www.cnpd.pt/ (complaints: https://www.cnpd.pt/cidadaos/participacoes/), or with your local EU authority (GDPR Article 77).
Children
The site is intended for adults building products. We do not knowingly collect data from children under 16. Portuguese Lei n.º 58/2019 Article 16 sets digital consent at 13 for information-society services; this community’s intended audience is adults.
Model labs
JoinAI lists ten models on the Ambassadors page, including Claude. It does not run those labs’ communities or ambassador programs. Claude, Claude Code, Claude.ai, and Anthropic marks belong to Anthropic. Other model and product names belong to their owners.
Privacy contact
Write to: hi@joinai.me.