Privacy Policy

HOLDUU collects the email address you submit to join the closed beta waitlist. We also store form source, locale, and UTM fields when they are present.

We use Cloudflare Turnstile, a hidden honeypot field, form timing checks, and rate limits to reduce automated abuse.

We use waitlist data to confirm your email, manage early access, estimate seller and buyer interest, and contact confirmed users about the HOLDUU launch.

The waitlist is separate from any future HOLDUU marketplace account, escrow flow, booking transfer, or hotel name-change process.

HOLDUU uses soft double opt-in. Your submission is stored as pending immediately, and your email is marked confirmed only after you open the confirmation link.

Confirmation tokens are stored as hashes. Raw confirmation tokens are used only inside confirmation links and are not logged.

Supabase stores the waitlist database. A transactional email provider, currently Resend by default, sends confirmation email. Cloudflare Turnstile helps verify that submissions are not automated.

Telegram is used only for anonymous operational notifications. Those notifications do not include your email address, masked email, email domain, confirmation token, IP address, or user-agent.

You can request deletion, correction, or unsubscribe by contacting HOLDUU at privacy@holduu.com from the email address you used for the waitlist.

This page is a practical waitlist disclosure and may be updated before public launch.