Privacy policy
Last updated: 30 September 2026 · Draft for legal review
Who we are
This website is run by Twinwright (company details pending). Contact for privacy questions: privacy@twinwright.com.
What we collect
What you send us in a form: your name, e-mail address and what you write (plus country, organisation or role where a form asks for them). With it we keep the page you sent it from, the time, the country your IP address belongs to, and a salted hash of your IP address that only limits repeated submissions and is deleted after 30 days. When you write to one of our addresses, we keep a record of the sender, the address and the subject; the message itself goes to our team’s mailbox. We use no advertising cookies and no cross-site tracking.
Why
To answer you, to keep the founders’ list and the early-access list, to send the monthly newsletter if you ask for it and confirm, and to keep the forms free of abuse. The legal basis is your consent, the steps before a contract you asked for, and our legitimate interest in secure forms (GDPR Art. 6(1)(a), (b) and (f); PIPL Art. 13).
Where it is stored
This website, its forms and its e-mail addresses run on Cloudflare (Workers, the D1 database, Email Routing and Email Service). A new message is also passed to our team by e-mail and in our internal team chat. Cloudflare may process data outside your country, for example in the United States or the EU; we rely on the standard contractual clauses in Cloudflare’s data processing agreement and, where the law asks for it, on your consent.
How long
Enquiries and list sign-ups: up to 2 years after the last contact, then deleted automatically. Newsletter: until you unsubscribe, and the record 30 days after that. Unconfirmed newsletter sign-ups: 14 days. IP hashes: 30 days. E-mails: in our mailbox for as long as the conversation needs them.
E-mails from us
After you send a form, we send one automatic confirmation to the address you gave; it repeats nothing you typed. For the newsletter we first send a confirmation link and add you only when you confirm (double opt-in). Every newsletter has a link to unsubscribe, or write to privacy@twinwright.com.
Your rights
You can ask for a copy, correction or deletion of your data, object to processing, withdraw consent and complain to your data-protection authority. Write to privacy@twinwright.com.
Studio
Studio runs offline and sends no data to us. It does not check for updates in the preview; any future update check will be optional and described here. Studio keeps an audit log and your program versions on your own computer (Documents\Twinwright Studio); they are never uploaded.
AI features in Studio
Studio's AI features are off until you turn them on. If you connect an AI provider, the prompts, programs and simulation results you choose to send go directly from your computer to that provider under its own terms; Twinwright receives nothing. Studio stores your API keys encrypted with Windows DPAPI on your computer. With a local model (LM Studio, Ollama) nothing leaves your computer.