Beta privacy notice

Who we are

Xforever Ltd, trading as Steadara, is responsible for the controlled Beta registration described in this notice. Steadara is a registered business name of Xforever Ltd, not a separate legal entity.

Legal form: Private company limited by shares
Company number: 235900
Business Registration Number: C26235900
Registered office and principal place of business: 32 St Georges Street, Port Louis 1114-04, Mauritius
Privacy contact: privacy@steadara.com

Who may register

The Steadara Beta waitlist is open worldwide to people who:

are aged 18 or over;
choose voluntarily to request potential participation; and
provide the information needed to operate the waitlist.

We ask you to confirm that you are aged 18 or over. We do not ask for or infer your country, nationality, address, date of birth, precise age, identity documents, or geolocation to determine waitlist eligibility.

Registration is a request to be considered. It does not create a completed contract, guarantee selection, or guarantee access to the Beta.

Information we handle

Information you provide

your first and last name;
your email address;
an optional answer about what interests you most about Steadara;
the device, operating system, and browser you expect to use for Beta testing;
your confirmation that the displayed device details are correct.

Your name, email, and confirmed device details are required to request registration. The interest answer is optional. The 18+ confirmation is required in your browser to use the form, but it is not added to the request payload, provider metadata, logs, or database.

Technical and operational information

Your browser may report broad device, operating-system, and browser information. We show it to you so that you can confirm or correct it. Exact Apple models are selected or entered by you; they are not automatically detected.

If registration and email are activated, we will also create limited registration, email-confirmation, delivery, failure, complaint, bounce, and suppression records. These may include timestamps and provider event identifiers needed to operate and protect the flow. Hosting infrastructure may also process ordinary request metadata needed to deliver and secure the website; Steadara does not deliberately add IP or location data to the Beta registration record.

Information we do not collect for registration

The registration payload does not contain Rapid Instinct answers, raw user-agent strings, screen or GPU details, WebGL or canvas output, precise or approximate location, country, nationality, address, date of birth, precise age, identity documents, behavioural analytics, advertising identifiers, or other fingerprinting data. Raw confirmation tokens are never stored in the database; only a temporary cryptographic digest is stored for matching.

Why we use the information

Registration and potential participation

We use the required identity, contact, optional interest, and confirmed compatibility details to take steps you request before possible Beta participation. As a Mauritius company, our selected basis under the Mauritius Data Protection Act 2017 is section 28(1)(b)(i).

Operational protection

We use limited request, confirmation-token, delivery, failure, and suppression information to prevent repeated or abusive attempts, protect token integrity, troubleshoot genuine failures, and secure the registration flow. Our selected basis is the legitimate-interests condition in section 28(1)(b)(vii). We limit the information, keep lifecycle and suppression separate, use neutral public responses, and do not use this basis for advertising or profiling.

Overseas processing needed for the request

Where the requested registration and confirmation steps require information to be processed outside Mauritius, our selected transfer condition is section 36(1)(c)(i). This does not mean that every country has been declared adequate or that a provider’s overseas arrangement is automatically approved.

The eligibility and device confirmations are factual acknowledgements. They are not optional marketing consent.

Essential Beta emails

If registration opens, we may send essential messages for email confirmation, security, selection or invitation, access, and controlled Beta administration. These messages support the registration or Beta relationship you requested.

We do not conduct optional product marketing in this initial flow. There is no marketing checkbox, and registration details will not be used to subscribe you to a promotional list.

Providers and overseas processing

We use a small number of service providers to host the website and operate registration and essential email. They may process information on our instructions:

Netlify hosts the website and runs the secure website Functions. Relevant processing may occur in the United States and other locations disclosed for its services and subprocessors.
Supabase hosts the dedicated website registration database. Its primary database region is Paris, France. Other provider or subprocessor processing may occur outside Mauritius where applicable.
Resend delivers essential confirmation email. Relevant processing may occur in the United States and other locations disclosed for its services and subprocessors.

The minimum applicable written processor arrangements, location information, and safeguards are reviewed for this flow. We do not claim that every overseas country has been deemed adequate by Mauritius or that this notice certifies compliance in every jurisdiction.

How long we keep information

Our controlled-Beta operating schedule is:

temporary rehearsal data is removed immediately after evidence review;
an unconfirmed registration is removed after 30 days;
raw confirmation tokens are never persisted;
active token digests expire after 48 hours and are cleared promptly after confirmation or expiry;
routine email-delivery events are retained for 90 days;
withdrawn or declined registrations are erased or stripped of nonessential identity and device information within 30 days;
after a bounce, complaint, or suppression, nonessential identity, interest, and device information is minimised within 30 days. We keep only the minimum identifier, reason, and date needed to prevent further email, with an annual necessity review;
confirmed, invited, or accepted registrations are kept during the active Beta relationship and for six months after participation or the controlled Beta ends; and
a website registration handed over to the separately governed Steadara application is minimised within 30 days after the verified handoff.

These reviews and deletion or minimisation steps are currently operated manually; this notice does not claim an automated retention system. A legal or security hold may require specific information to be kept for longer.

What we do not do

We do not sell website-Beta personal information.
We do not share it for targeted or cross-context behavioural advertising or advertising-profile enrichment.
We do not use behavioural profiling or a solely automated decision to determine Beta eligibility or selection.
We do not use non-essential analytics, advertising pixels, or behavioural tracking in this controlled flow.

Your rights

Under Mauritius data-protection law, you may ask for access to your personal information, correction of inaccurate or incomplete information, restriction of processing, erasure where applicable, or object to processing.

Depending on where you live, additional data-protection rights and complaint routes may apply. Contact us so that we can review your request under the rules that apply.

You may also withdraw your registration request or ask not to be considered for the Beta. We may need to retain a minimal suppression or security record where necessary to honour your request or protect the service.

Email privacy@steadara.com to make a request. We will use only the information reasonably needed to confirm that the request relates to you and will review it personally.

You may lodge a complaint with theMauritius Data Protection Office.

Changes to this notice

We will update the effective date and version when this notice changes. If the Beta introduces new information, providers, marketing, analytics, higher-risk processing, or materially different purposes, we will review and update this notice before the changed processing begins.