Privacy notice

Current data practices, without future-tense claims.

Last updated August 29, 2026

Scope and product stage

This notice covers the public Turnline website, early-access list, and invited private product previews. Production currently exposes the waitlist. Live phone calls, recordings, transcripts, calendar writes, payments, and product analytics are not currently enabled. An hourly public availability monitor checks the homepage, health contract, private-workspace boundary, and public status indicators for active infrastructure providers. It records controlled workflow, provider-indicator, and incident status but does not submit visitor or customer data, credentials, or provider response details.

Information we collect

When you request a pilot review, we collect your email address, HVAC business name, and, if provided, your name. We also retain the Turnline page and form placement where you submitted the request and, when present in that page URL, bounded UTM source, medium, and campaign labels. We do not store the full query string or referring page. The form processes a short-lived start time and hidden anti-spam field to reject obvious automated submissions; neither value is saved in the waitlist record. Invited Preview users may also provide authentication details, organization membership, business operating rules, and synthetic simulation decisions. We ask Preview users not to enter real caller or customer data.

How we use information

We use waitlist information to deliver requested updates, select research or pilot participants, support users, prevent abuse, and understand which workflows to prioritize. Preview information is used to authenticate invited operators, save their configured rules, run controlled synthetic evaluations, and troubleshoot the product. We do not sell personal information or use it for third-party behavioral advertising.

Cookies and measurement

The public pilot-request page does not use product analytics, advertising cookies, or cross-site tracking. When a visitor submits the review form, the request record includes the bounded first-party acquisition labels described above so we can compare which Turnline pages and campaigns produce pilot interest. A bounded copy of a new HVAC request is delivered through Resend to Turnline's support inbox for fit review; requests outside the current HVAC focus remain in Supabase without generating a reviewer alert, and delivery failures do not erase the request record. An authenticated Preview may use essential Supabase session cookies to keep an invited operator signed in. If broader analytics is introduced, this notice and the applicable consent behavior will be updated before collection begins.

Service providers and disclosures

Vercel hosts the site, Supabase stores configured waitlist or invited Preview data and provides authentication when enabled, Resend delivers requested email, and GitHub runs the public boundary monitor and retains its workflow and incident records. These providers process information for Turnline under their own security and privacy commitments. We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction with appropriate safeguards.

Retention, access, export, and deletion

We retain information only while it supports the purposes above, legal obligations, security, or an active research or pilot relationship. Automated self-service export and deletion are not yet available. Requests are handled manually: email support@queststudio.io to access, correct, export, or delete your information. We will verify the request, remove active records within 30 days when legally permitted, and explain any limited information that must be retained. Provider backups may expire later under the provider's backup schedule.

Security and international processing

We use access controls, tenant-scoped data rules, limited credentials, and deployment checks appropriate to the current product stage. No internet service can guarantee absolute security. Our providers may process information in the United States or other locations where they operate.

Children

Turnline is a business service and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes

We may update this notice as the product develops. Material changes will be reflected by the date above, and we will provide additional notice when appropriate.