Privacy notice
This notice explains how personal data is processed when you visit tray-it.com or ask to join the Tray private beta. It is provided under Article 13 of the General Data Protection Regulation (EU) 2016/679 (the "GDPR"). In this notice, "we" and "us" mean the controller named in section 1 and, from the handover described in section 7, Tray's Portuguese company.
1. Controller
Tray is being developed by its three founders, Melissa Ribaira, Viviana Mendes and Godswill Adigwe, ahead of the incorporation of Tray's Portuguese company. Until then, Melissa Ribaira operates this site and holds the beta list on behalf of the founders. She is the controller of your personal data: she determines how it is used and is accountable for it. She processes it in compliance with the GDPR.
Contact: contact@tray-it.com
2. Personal data we collect, and what this site does not collect
2.1 Beta requests. When you ask to join the private beta, through the form on this site or by email, we receive your full name, your email address and, if you choose to provide it, your occupation. The form sends them to our contact@tray-it.com mailbox as an email, together with a record of your consent, as described in section 3. If you write to us directly, we receive your email and its contents.
2.2 Server logs. When you visit this site, our hosting provider, Hostinger, records each request in a standard server log: your IP address, the date and time, the page requested, your browser and device type, and the country associated with your IP address. Hostinger retains these logs under its own retention rules, which it does not publish. We can view them for up to seven days in our hosting dashboard, and we do not copy or export them.
2.3 What this site does not do. This site sets no cookies, uses no analytics and makes no requests to third parties. Its fonts and scripts are served from tray-it.com. The form sends your details only to our own server at tray-it.com, which passes them to our mailbox and keeps no other copy.
3. Purposes and legal basis
3.1 We use your name and email address to send your beta invitation, to reply to you and, once you have joined the beta, to send you feedback questionnaires. If you tell us your occupation, we use it to decide the order of invitations, as the beta opens first to executive and virtual assistants.
3.2 This processing is based on your consent (Article 6(1)(a) GDPR), given when you tick the consent box or write to us. You may withdraw your consent at any time by replying "remove" or by writing to contact@tray-it.com, and we will then delete your personal data. Withdrawal does not affect the lawfulness of processing carried out before it.
3.3 Server logs are processed to deliver this site and keep it secure, on the basis of our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
3.4 Providing your personal data is voluntary. Without a name and an email address, however, we cannot invite you to the beta. We do not use your personal data for marketing, and no decision about you is taken by automated means.
4. Recipients and international transfers
4.1 The beta list is accessible to Tray's three founders: Melissa Ribaira, who maintains it, and Viviana Mendes and Godswill Adigwe, who use it to give you access to the beta and to send its feedback questionnaires.
4.2 The following service providers process it on our behalf, each under data processing terms that bind it to our instructions:
- Hostinger, which hosts this site and the contact@tray-it.com mailbox where your email is received;
- Google, which hosts the spreadsheet containing the beta list, in Melissa Ribaira's business Google Workspace;
- Notion, which the founders use to organise the beta.
4.3 Some of these providers, or their own sub-processors, may process your personal data outside the European Union, mainly in the United States. Where they do, the transfer is protected by the standard contractual clauses adopted by the European Commission.
4.4 We do not sell your personal data or disclose it to anyone else. When the beta opens, the app stores' test services and the tool used for the feedback questionnaires will need your email address; we will name them in this notice before that happens.
5. Retention
5.1 We keep your personal data until the private beta ends and delete it within one month of its end. If you withdraw your consent or ask us to delete your data sooner, we do so within one month of your request. In any event, the beta list will be deleted by 31 December 2027.
5.2 Your email and our reply are kept for the same period, as the record of your request to join.
5.3 If you join Tray after the beta, the app's own privacy notice will govern the data you provide at that time.
5.4 Server logs are retained by Hostinger as set out in section 2.2.
6. Your rights and complaints
6.1 You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict its processing, and to receive it in a structured, commonly used and machine-readable format (Articles 15 to 18 and 20 GDPR). You may withdraw your consent at any time, and you may object to our processing of server logs (Article 21 GDPR).
6.2 To exercise these rights, write to contact@tray-it.com. We will respond within one month, free of charge. A request sent from the email address you gave us is sufficient to confirm your identity.
6.3 If you consider that your personal data has not been handled lawfully, you may lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt). If you live or work in France, you may lodge it with the Commission nationale de l'informatique et des libertés (CNIL, www.cnil.fr). Elsewhere in the European Union, you may lodge it with the supervisory authority of the country where you live or work. If you live in Switzerland, you may also contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). You may also write to us first, and we will try to resolve the matter.
7. Handover to Tray's company
On its incorporation, Tray's Portuguese company will take over this site, the beta list and this notice, and will become the controller of your personal data in place of Melissa Ribaira. Your personal data will pass to it for the same purposes and on the same terms. Before the handover, we will update this notice with the company's name and registered address and inform you by email, so that you may ask us to delete your personal data instead.
8. Contact and changes to this notice
For any question about your personal data, write to contact@tray-it.com. If we change this notice, we will publish the new version on this page with its date, and inform you by email of any change that affects how we use your personal data.